Protection Mechanism Failure

Every one of the 885 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Internet Shortcut Files Security Feature Bypass VulnerabilityCVE-2024-21412Microsoft · CVSS 8.1 · 99% likely

   Microsoft

2. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and Op…CVE-2013-2465Oracle · CVSS 9.8 · 99% likely

   Oracle

3. Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationCVE-2019-1003030Jenkins project · CVSS 9.9 · 97% likely

   Jenkins

4. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the…CVE-2013-0431Oracle · CVSS 3.7 · 90% likely

   Oracle

5. SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control BypassCVE-2025-40536SolarWinds · CVSS 8.1 · 74% likelycovered by CyberSIXT

   SolarWinds

6. Windows Shell Spoofing VulnerabilityCVE-2026-32202Microsoft · CVSS 4.3 · 71% likelycovered by CyberSIXT

   MicrosoftStorm-1175

7. Windows Shell Security Feature Bypass VulnerabilityCVE-2026-21510Microsoft · CVSS 8.8 · 61% likelycovered by CyberSIXT

   MicrosoftAPT28

8. 7-Zip Mark-of-the-Web Bypass VulnerabilityCVE-2025-04117-Zip · CVSS 7 · 48% likely

   7-Zip

9. SmartScreen Prompt Security Feature Bypass VulnerabilityCVE-2024-29988Microsoft · CVSS 8.8 · 45% likely

   Microsoft

10. MSHTML Framework Security Feature Bypass VulnerabilityCVE-2026-21513Microsoft · CVSS 8.8 · 16% likelycovered by CyberSIXT

    MicrosoftAPT28

11. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-38213Microsoft · CVSS 6.5 · 14% likely

    Microsoft

12. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-38217Microsoft · CVSS 5.4 · 10% likely

    Microsoft

13. Microsoft Publisher Security Feature Bypass VulnerabilityCVE-2024-38226Microsoft · CVSS 7.3 · 2.7% likely

    Microsoft

14. In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional…CVE-2026-58704Google · CVSS 8.8 · 0.6% likelycovered by CyberSIXT

    Google8 articles

15. A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define an…CVE-2024-34144Jenkins Project · CVSS 9.8 · 48% likely

    Jenkins

16. In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates fi…CVE-2018-20251Check Point Software Technologies Ltd. · 31% likely

    Check Point

17. Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.CVE-2024-29510Artifex · CVSS 6.3 · 28% likely

    Artifex

18. Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-w…CVE-2018-679424% likely
19. Windows GDI Information Disclosure VulnerabilityCVE-2025-47984Microsoft · CVSS 7.5 · 23% likely

    Microsoft

20. x86: Incorrect logic for BTC/SRSO mitigationsCVE-2024-31142Xen · CVSS 7.5 · 17% likely

    Xen

21. The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-midd…CVE-2016-077215% likely
22. PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codeCVE-2026-34938MervinPraison · CVSS 10 · 13% likely

    MervinPraison

23. n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code NodeCVE-2025-68668n8n-io · CVSS 9.9 · 13% likely

    N8n-Io

24. Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-30050Microsoft · CVSS 5.4 · 11% likely

    Microsoft

25. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.…CVE-2021-35556Oracle Corporation · CVSS 5.3 · 8.4% likely

    Oracle

26. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerabi…CVE-2017-10952Zero Day Initiative · 7.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.