Hi,
So you need to have vCenter update manager installed.
- Then go to update manager administration and create a new baseline , type a name and select host patch :
- Select dynamic patch option and select product as needed. (Here in Severity , select critical, if you need only critical patch).
- Then leave by default and click on finish.
- After you need to attach your baseline to your cluster. So select your cluster, go to update manager tab and click on "Attach" and select your baseline previously created.-
- Right click on your cluster and click on "Scan for update".
- Select a host, put it in maintenance mode. Then right click and remediate.
Et voila 
Regards,
Julien.