I love charts! And Secunia, the most oft-quoted security company in just about every discussion of OS security vulnerabilities, does not disappoint.
Here''s a chart of OS X advisories compiled by Secunia covering the period from 03-06 on a monthly basis. It reports a total of 66 advisories.
Now here's the chart for Windows XP. It reports a total of 111 advisories. Almost double the pleasure, double the fun...
Well, how well is Apple and Microsoft responding with patches for the above vulnerabilities you ask? The chart for Apple, if you please...
It reports that only 2% remain unpatched. Impressive. And now, ladies and gentleman, the same chart for Microsoft....
It reports a whopping 20% remain unpatched.

And since there are, as we all know, very real exploits for Windows XP in circulation, only one word comes to mind:
ouch!
But what does all of this mean for the average user? Are their systems really at risk? What's the "impact?" Can someone gain access to their system? Or render it useless with a DOS (denial of service) attack. Once again, with all due trepidation, lets have a peek at the chart for OS X...
According to Secunia, 21% of Apple's system vulnerabilities (which we have already seen are largely patched) could have lead to system access and 17% could have lead to a DOS. Geez, thank God Apple is paying attention to this stuff. But what about Microsoft's largely unpatched vulnerabilities in Window's XP? How bad are they? Well, for the brave amongst you, here is the chart. For Microsoft's apologists, it's time to close your eyes...
Good God, 50% could lead to system access. 20% could lead to DOS. And as noted above, Microsoft still has their work cut out for them, 20% of its vulnerabilities remain unpatched. And you wonder why there are so much malware on Windows? Probably one of the finest assessments I've ever read regarding the security issue for Windows versus that of OS X is
Jon Gruber's Broken Windows article, which still holds true today. And it nails the main issue pertaining to Microsoft that none of the Security firms seem the least bit willing to discuss.