AppYour homeOperatorJournalAlerts
Request an introduction
Advisory

Brave on Chromium 152

Brave is built on Chromium, the open-source core of Google Chrome. Since Chromium 152, Google has fixed 1,086 security fixes in it, 41 rated critical and 284 high by Google. One of them is being used in attacks.

Brave on Chromium 152Critical
Affected
Brave 1.94.114 to 1.94.122, built on Chromium 152
Fix
Brave 1.98.61, built on Chromium 156.0.8078.48, released 22 Oct 2026
Missing
1,086 security fixes across 10 Chrome releases, 153.0.8010.36 (8 Sep 2026) to 156.0.8078.47 (20 Oct 2026)
Severity
41 rated critical and 284 high by Google
Used in attacks
  • CVE-2026-87491, a memory flaw in Chrome's JavaScript engine that lets a web page run code
What's missing.Counted from Google’s release notes, the same way the HARD app counts it, checked 23 Oct 2026.

Brave builds on Chromium 152 older than 1.94.121 (Chromium 152.0.7977.83) are also missing the fix for CVE-2026-85046, which Google fixed in 152.0.7977.82 on 3 Sep 2026 and says is being used in attacks.

Being used in attacks

  1. Used in attacks
    CVE-2026-87491

    A memory flaw in Chrome's JavaScript engine that lets a web page run code.

    What it is, and the sources

What to do

  1. Update Brave, then relaunch it.Brave Browser → About Brave in the menu bar, or type brave://settings/help in the address bar. It downloads the update and asks to relaunch, with your tabs.
  2. Check it says it’s up to date.The About page shows the Brave version and the Chromium version it's built on. Brave 1.98.61 is built on Chromium 156.0.8078.48.

Release by release

ReleaseFixesCriticalHigh
Chrome 156.0.8078.47/48 353 661
Chrome 155.0.8059.84/85 10 16
Chrome 155.0.8059.79/80 37 729
Chrome 155.0.8059.39/40 247 453
Chrome 154.0.8037.97/98 11 19
Chrome 154.0.8037.92/93 32 125
Chrome 154.0.8037.57/58 108 1125
Chrome 153.0.8010.52/53 16 27
Chrome 153.0.8010.47/48 42 328
Chrome 153.0.8010.36/37 · CVE-2026-87491 230 541
Newest first.Every Chrome release since Chromium 152, with Google's own counts. Brave picks up each one in its next release.

Sources

  1. Release v1.98.61 (Chromium 156.0.8078.48)The current Brave release and the Chromium it's built on.github.com/brave ·
  2. Release v1.94.122 (Chromium 152.0.7977.83)The last Brave release on Chromium 152.github.com/brave ·
  3. Stable Channel Update for Desktop: Chrome 156.0.8078.47/48353 security fixes, 6 rated critical and 61 high by Google.chromereleases.googleblog.com ·
  4. Stable Channel Update for Desktop: Chrome 155.0.8059.84/8510 security fixes, 1 rated critical and 6 high by Google.chromereleases.googleblog.com ·
  5. Stable Channel Update for Desktop: Chrome 155.0.8059.79/8037 security fixes, 7 rated critical and 29 high by Google.chromereleases.googleblog.com ·
  6. Known Exploited Vulnerabilities catalog: CVE-2026-87491CVE-2026-87491, added 9 Sep 2026.cisa.gov ·
  7. Known Exploited Vulnerabilities catalog: CVE-2026-85046CVE-2026-85046, added 4 Sep 2026.cisa.gov ·
Every advisoryLook up any app, company or CVEThe HARD Mac app links its warnings here.