That security patch date on your Android phone is no longer the full story

Google released stable versions of AndroidX Security State and Security State Provider: apps can check the status of individual Android components, the presence of specific patches (CVEs), and available updates, not just the overall security patch date. In Android 17, manufacturers will be able to report individual fixes to the system without changing the patch date.

• Apps check individual fixes, not just patch date
• Can learn about available but not installed update
• CVE check for NFC and Bluetooth before payment
• In Android 17 OEMs can indicate individual fixes