Should you update to Brave 1.97.57?
No: install Brave 1.99.55 instead. Brave 1.97.57 is a security update Brave released on 14 Oct 2026 for Mac, Windows and Linux. It fixes 37 security flaws, 7 rated critical and 29 high by Brave.[1] None of them is known to be used in attacks.
It has since been replaced by Brave 1.97.59, released 16 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Brave 1.99.55 instead. Brave 1.99.55 came out on 4 Nov 2026 and includes every fix in Brave 1.97.57, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Brave 1.97.57 still safe?
Not any more. The 5 updates since, up to Brave 1.99.55, fix 649 security flaws that Brave 1.97.57 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Brave’s own About Brave page, never from a link in an email, text or pop-up.
What it fixes
Brave lists 37 security flaws, 7 rated critical and 29 high by Brave.[1] The 36 critical and high ones are:
| Flaw | Severity | What Brave calls it |
|---|---|---|
CVE-2026-110152 | Critical | Buffer overflow in ANGLE |
CVE-2026-110149 | Critical | Use after free in Browser |
CVE-2026-110136 | Critical | Use after free in PDF |
CVE-2026-110161 | Critical | Use after free in Network |
CVE-2026-110165 | Critical | Use after free in Core |
CVE-2026-110148 | Critical | Use after free in SVG |
CVE-2026-110151 | Critical | Use after free in Media |
CVE-2026-110162 | High | Use after free in Desktop |
CVE-2026-110170 | High | Use after free in Bindings |
CVE-2026-110160 | High | Missing authorization in ReadingMode |
CVE-2026-110143 | High | Use of uninitialized variable in ThirdParty lmza_sdk |
CVE-2026-110146 | High | Information leak in Passwords |
CVE-2026-110150 | High | Privilege elevation in Installer |
CVE-2026-110156 | High | Incorrect reference resolution in Extensions |
CVE-2026-110137 | High | Use after free in WebRTC |
CVE-2026-110140 | High | Type confusion in V8 |
CVE-2026-110158 | High | Use after free in Passwords |
CVE-2026-110145 | High | Use after free in Passwords |
CVE-2026-110159 | High | Incorrect authorization in Updater |
CVE-2026-110144 | High | Incorrect authorization in Mojo |
CVE-2026-110153 | High | Use after free in Media |
CVE-2026-110166 | High | Buffer overflow in Animation |
CVE-2026-110169 | High | Use after free in V8 |
CVE-2026-110168 | High | Use after free in V8 |
CVE-2026-110139 | High | Use after free in Media |
CVE-2026-110172 | High | Use after free in Media |
CVE-2026-110164 | High | Use after free in DOM |
CVE-2026-110163 | High | Use after free in DOM |
CVE-2026-110141 | High | Observable discrepancy in Media |
CVE-2026-110138 | High | Use after free in ShapeDetection |
| and 6 more | ||
How to update, and how long it takes
A minute or two. Brave restarts and reopens your tabs.
- Open Brave and click the ☰ menu at the top right.Choose About Brave. Brave looks for the update and downloads it by itself.
- Click Relaunch.Brave closes and opens again with the same tabs.
To check it worked: ☰ menu → About Brave: it shows the version, like 1.84.135, and the Chromium it’s built on. It should say 1.97.59 or later.
1.97.56 vs 1.97.57
Brave 1.97.56, released 7 Oct 2026, fixed 247 security flaws. Brave 1.97.57 fixes 37 security flaws and includes the fixes before it, so going straight to 1.97.57 gets you both.
- Before: Brave 1.97.56, 7 Oct 2026, 247 security flaws
- After: Brave 1.97.59, 16 Oct 2026, 10 security flaws
- Brave updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Brave. “Brave Release v1.97.57 (Chromium 155.0.8059.80)”, 14 Oct 2026.

