Patching SP2010 Server Farm

We have a 3 tier SP2010 server farm. This farm was last patched with SP2 and May 2015 CU. Now we have a request to apply SP 2010 security patches released in 2017.

Can we install the recent security patches released in 2017 or do we need to install CUs released after 2015 before applying recent security patches? What will be the best thing to do? Please help.