Exploited in the wild

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Sitecore Experience Platform Pre-Auth RCECVE-2021-42237Sitecore · CVSS 9.8 · 97% likely

   CWE-502Sitecore

2. Metabase - Local File InclusionCVE-2021-41277metabase · CVSS 10 · 97% likely

   CWE-200Metabase

3. Zoho ManageEngine ServiceDesk Plus - Remote Code ExecutionCVE-2021-44077Zoho · CVSS 9.8 · 94% likely

   CWE-306Zoho (ManageEngine)

4. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-42321Microsoft · CVSS 8.8 · 92% likely

   Microsoft

5. Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-42287Microsoft · CVSS 7.5 · 77% likely

   Microsoft

6. Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2021-42278Microsoft · CVSS 7.5 · 73% likely

   Microsoft

7. Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.CVE-2021-44026Roundcube · CVSS 9.8 · 70% likely

   CWE-89Roundcube

8. Microsoft Excel Security Feature Bypass VulnerabilityCVE-2021-42292Microsoft · CVSS 7.8 · 43% likely

   Microsoft

9. Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-38003Google · CVSS 8.8 · 39% likelycovered by CyberSIXT

   CWE-755GoogleUNC35692 articles

10. Windows Installer Elevation of Privilege VulnerabilityCVE-2021-41379Microsoft · CVSS 5.5 · 19% likely

    CWE-59Microsoft

11. Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a c…CVE-2021-38000Google · CVSS 6.1 · 4.9% likely

    CWE-601Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.