Given the context of the thread, it's remiss of you not to include some more context:
#1 OS X
#2 Linux
#5 iPhone OS
#6 Flash
#8 Debian Linux
#9 Windows XP
#10 Windows Server 2008
Which is to say that, except for Flash, all of the top 10 products are browsers or OSes.
On the other hand, looking at the full list, I'm not so sure I trust the data curation. The JRE and JDK are each listed twice (because Oracle bought out Sun), and Internet Explorer and IE are two separate listings.
Top 50 Products By Total Number Of "Distinct" Vulnerabilities http://www.cvedetails.com/top-50-products.php
#3 Firefox
#4 Chrome
#7 Internet Explorer