Google confirmed that 40 % of Android devices are vulnerable to the flaw

Google released new figures on Android version prevalence

According to the latest data from Google, only 58 % of devices run current OS versions that continue to receive critical security updates. About 40 % of smartphones—more than a billion gadgets worldwide—no longer receive patches that close vulnerabilities.

Version | Device Share
Android 16 (latest) | 7.5 %
Android 15 | 19.3 %
Android 14 | 17.9 %
Android 13 | 13.9 %

Thus, almost half of users are outside the protection zone against new threats from malicious and spyware software.

How does Google protect outdated gadgets?
According to a Google spokesperson, the built‑in antivirus Google Play Protect continues to work on devices up to Android 7. It provides real‑time checks and scans for new threats using the latest security signatures. However, the company emphasizes that responsibility for the security of specific apps remains with their developers.

> “Play Protect supports devices starting from Android 7 to provide users with protection.”
> — Google representative

Forbes notes that ultimately the bulk of the protective burden falls on device manufacturers.

OEM update policy
The problem is exacerbated by some manufacturers’ decisions. Samsung announced it would stop releasing updates for the Galaxy S21 lineup (S21, S21 Plus, and S21 Ultra). These models are no longer in the official list of supported devices and have stopped receiving security fixes.

In addition, owners of the Galaxy S22 and S21 FE models, which previously received monthly patches, now switch to a quarterly update schedule, reducing the speed of response to new threats.

What should users do?
Experts advise owners of aging flagship phones to consider buying a new device. Even a mid‑budget smartphone with active OS support is usually safer than an old top model without updates.

Bottom line: almost half of Android users remain at risk due to lack of critical patches. Google Play Protect helps, but the main protection has to be left to OEMs and app developers.