A crucial system behind Android security updates just lost its funding
The end of the CVE program could cause Android updates to slow down and become less transparent.

- The US government has stopped funding the Common Vulnerabilities and Exposures (CVE) database, a standardized global system for identifying and tracking software vulnerabilities across platforms and devices, including Android.
- Without CVEs, Google’s monthly Android security bulletins may face delays, confusion, or reduced transparency.
- It’s unclear who, if anyone, will step in to maintain or replace the CVE system.
The United States government has abruptly pulled funding for the Common Vulnerabilities and Exposures database (CVE). Without US funding, the critical security program that standardizes naming and tracking vulnerabilities will be as good as dead unless it finds another benefactor. Now, it might sound like a behind-the-scenes change, but this development could affect how fast your Android phones get security updates.