ZDNet, writing about Android vulnerabilities:

Nearly 90 percent of Android devices are exposed to at least one critical vulnerability, because of Android handset makers’ failure to deliver patches, according to research from the UK’s University of Cambridge.

Security is one of the reasons I stay clear of Android (snoopy business models is another one). If you want to know more, check out AndroidVulnerabilities.org, made by the researchers. There, Android devices are compared and graded accordingly.