Google already has a patch out for it's most recent vulnerability, but most phone-makers are lagging behind pushing the update out. This leaves plenty of people still vulnerable.