A wide variety of systems components are affected by the updates and many would be termed critical if Apple used severity ratings. For instance there is a CoreGraphics bug described as "Viewing a maliciously crafted image may lead to an unexpected application termination or arbitrary code execution". There is probably at least one of these in each OS X update. At least some of the Flash vulnerabilities also could result in arbitrary code execution. Likewise, a series of updates to Libsystem fix bugs in various APIs that could result in arbitrary code execution.
None of the bugs is a real 5-alarmer where remote users can attack with no user interaction, and several are clearly less severe. But users should still update their systems ASAP.
Originally posted to PCmag.com's Security Watch blog.
Source : http://www.pcmag.com/
