Should you update to Brave 1.91.171?
No: install Brave 1.99.55 instead. Brave 1.91.171 is a security update Brave released on 9 Jun 2026 for Mac, Windows and Linux. It fixes 74 security flaws, 17 rated critical and 55 high by Brave.[1] One of them is already being used in attacks.
It has since been replaced by Brave 1.91.172, released 12 Jun 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Brave 1.99.55 instead. Brave 1.99.55 came out on 4 Nov 2026 and includes every fix in Brave 1.91.171, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Brave 1.91.171 still safe?
Not any more. The 31 updates since, up to Brave 1.99.55, fix 2,755 security flaws that Brave 1.91.171 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Brave’s own About Brave page, never from a link in an email, text or pop-up.
What it fixes
Brave lists 74 security flaws, 17 rated critical and 55 high by Brave.[1] The 72 critical and high ones are:
| Flaw | Severity | What Brave calls it |
|---|---|---|
CVE-2026-11628 | Critical | Use after free in Ozone |
CVE-2026-11629 | Critical | Use after free in Ozone |
CVE-2026-11630 | Critical | Use after free in File Input |
CVE-2026-11631 | Critical | Use after free in Aura |
CVE-2026-11632 | Critical | Use after free in TabStrip |
CVE-2026-11633 | Critical | Use after free in Bluetooth |
CVE-2026-11634 | Critical | Use after free in Gamepad |
CVE-2026-11635 | Critical | Use after free in Bluetooth |
CVE-2026-11636 | Critical | Use after free in Autofill |
CVE-2026-11637 | Critical | Use after free in Views |
CVE-2026-11638 | Critical | Use after free in Printing |
CVE-2026-11639 | Critical | Use after free in Compositing |
CVE-2026-11640 | Critical | Integer overflow in libyuv |
CVE-2026-11641 | Critical | Use after free in Bluetooth |
CVE-2026-11642 | Critical | Use after free in Web Apps |
CVE-2026-11643 | Critical | Use after free in Proxy |
CVE-2026-11644 | Critical | Use after free in Views |
CVE-2026-11645 | High | Out of bounds memory access in V8 |
CVE-2026-11646 | High | Use after free in ViewTransitions |
CVE-2026-11647 | High | Use after free in Printing |
CVE-2026-11648 | High | Use after free in FullScreen |
CVE-2026-11649 | High | Use after free in V8 |
CVE-2026-11650 | High | Use after free in V8 |
CVE-2026-11651 | High | Use after free in Network |
CVE-2026-11652 | High | Use after free in Extensions |
CVE-2026-11653 | High | Insufficient validation of untrusted input in Extensions |
CVE-2026-11654 | High | Use after free in CameraCapture |
CVE-2026-11655 | High | Integer overflow in Media |
CVE-2026-11656 | High | Use after free in ServiceWorker |
CVE-2026-11657 | High | Use after free in Payments |
| and 42 more | ||
Used in attacks
This fix closes a flaw that attackers were already using before the update came out, either on CISA’s list of flaws being used in attacks or in Brave’s own words.[2]
How to update, and how long it takes
A minute or two. Brave restarts and reopens your tabs.
- Open Brave and click the ☰ menu at the top right.Choose About Brave. Brave looks for the update and downloads it by itself.
- Click Relaunch.Brave closes and opens again with the same tabs.
To check it worked: ☰ menu → About Brave: it shows the version, like 1.84.135, and the Chromium it’s built on. It should say 1.91.172 or later.
1.91.166 vs 1.91.171
Brave 1.91.166, released 2 Jun 2026, fixed 429 security flaws. Brave 1.91.171 fixes 74 security flaws and includes the fixes before it, so going straight to 1.91.171 gets you both.
- Before: Brave 1.91.166, 2 Jun 2026, 429 security flaws
- After: Brave 1.91.172, 12 Jun 2026, 27 security flaws
- Brave updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Brave. “Brave Release v1.91.171 (Chromium 149.0.7827.103)”, 9 Jun 2026.
- ^ Cybersecurity and Infrastructure Security Agency. “Known Exploited Vulnerabilities Catalog”.