Pick what you run. Lists the CVEs Apple fixed after that version — in later updates of the same version line, and fixes that only shipped in newer major versions. Based on Apple's advisories only; a CVE fixed only in a newer major version may or may not affect older ones.