Over a Billion Android Devices Vulnerable Due to Lack of Security Updates

• •Over a billion Android devices are no longer receiving security updates.
• •15.61% of Android devices are running unsupported OS versions, increasing vulnerability.
• •Users must check their device's security patch level to assess their risk.

As of September 2026, more than a billion Android smartphones are running outdated software versions that no longer receive security patches from Google, specifically those on Android 12 and older. Google ceased support for Android 12 and 12L on March 31, 2025, leaving devices vulnerable to newly discovered exploits. Certo's analysis indicates that 15.61% of Android devices are affected, equating to roughly one in six users potentially unaware of their security risks. The lack of security updates means that any vulnerabilities discovered after the support end date remain unpatched, increasing the risk of exploitation. Users are advised to check their device's security patch level and consider upgrading if their device is no longer supported. Similar concerns apply to iPhone users, as Apple also ends support for older models, such as the iPhone 12, in October 2026.