Google publishes a monthly Android Security Bulletin that publicly lays out what it has fixed in the latest Android update.
About a billion active Android devices are potential targets, with many users still running outdated Android versions.