Android’s April update includes two critical CVE-level patches among a total of 11 affecting handsets running versions 7, 8, and 9.