Should you update to Brave 1.91.175?
No: install Brave 1.99.55 instead. Brave 1.91.175 is a security update Brave released on 17 Jun 2026 for Mac, Windows and Linux. It fixes 33 security flaws, 7 rated critical and 26 high by Brave.[1] None of them is known to be used in attacks.
It has since been replaced by Brave 1.91.178, released 24 Jun 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Brave 1.99.55 instead. Brave 1.99.55 came out on 4 Nov 2026 and includes every fix in Brave 1.91.175, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Brave 1.91.175 still safe?
Not any more. The 29 updates since, up to Brave 1.99.55, fix 2,695 security flaws that Brave 1.91.175 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Brave’s own About Brave page, never from a link in an email, text or pop-up.
What it fixes
Brave lists 33 security flaws, 7 rated critical and 26 high by Brave.[1] The 33 critical and high ones are:
| Flaw | Severity | What Brave calls it |
|---|---|---|
CVE-2026-12437 | Critical | Use after free in WebShare |
CVE-2026-12438 | Critical | Inappropriate implementation in WebView |
CVE-2026-12439 | Critical | Use after free in Digital Credentials |
CVE-2026-12440 | Critical | Use after free in DigitalCredentials |
CVE-2026-12441 | Critical | Use after free in File Input |
CVE-2026-12442 | Critical | Use after free in Passwords |
CVE-2026-12443 | Critical | Use after free in Web Authentication |
CVE-2026-12444 | High | Out of bounds read in Chromoting |
CVE-2026-12445 | High | Use after free in Extensions |
CVE-2026-12446 | High | Insufficient data validation in Passwords |
CVE-2026-12447 | High | Heap buffer overflow in WebRTC |
CVE-2026-12448 | High | Inappropriate implementation in WebView |
CVE-2026-12449 | High | Use after free in Chromoting |
CVE-2026-12450 | High | Inappropriate implementation in Media |
CVE-2026-12451 | High | Use after free in DigitalCredentials |
CVE-2026-12452 | High | Use after free in Downloads |
CVE-2026-12453 | High | Insufficient validation of untrusted input in Input |
CVE-2026-12454 | High | Race in Safe Browsing |
CVE-2026-12455 | High | Use after free in Tab Strip |
CVE-2026-12456 | High | Insufficient validation of untrusted input in Extensions |
CVE-2026-12457 | High | Insufficient data validation in Extensions |
CVE-2026-12458 | High | Incorrect security UI in Passwords |
CVE-2026-12459 | High | Inappropriate implementation in Serial |
CVE-2026-12460 | High | Insufficient policy enforcement in File System Access |
CVE-2026-12461 | High | Out of bounds read in WebRTC |
CVE-2026-12462 | High | Use after free in Media |
CVE-2026-12463 | High | Inappropriate implementation in Views |
CVE-2026-12464 | High | Use after free in Browser |
CVE-2026-12465 | High | Insufficient validation of untrusted input in Metrics |
CVE-2026-12466 | High | Heap buffer overflow in WebRTC |
| and 3 more | ||
How to update, and how long it takes
A minute or two. Brave restarts and reopens your tabs.
- Open Brave and click the ☰ menu at the top right.Choose About Brave. Brave looks for the update and downloads it by itself.
- Click Relaunch.Brave closes and opens again with the same tabs.
To check it worked: ☰ menu → About Brave: it shows the version, like 1.84.135, and the Chromium it’s built on. It should say 1.91.178 or later.
1.91.172 vs 1.91.175
Brave 1.91.172, released 12 Jun 2026, fixed 27 security flaws. Brave 1.91.175 fixes 33 security flaws and includes the fixes before it, so going straight to 1.91.175 gets you both.
- Before: Brave 1.91.172, 12 Jun 2026, 27 security flaws
- After: Brave 1.91.178, 24 Jun 2026, 18 security flaws
- Brave updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Brave. “Brave Release v1.91.175 (Chromium 149.0.7827.155)”, 17 Jun 2026.