Should you update to Brave 1.98.60?
No: install Brave 1.99.55 instead. Brave 1.98.60 is a security update Brave released on 21 Oct 2026 for Mac, Windows and Linux. It fixes 353 security flaws, 7 rated critical and 60 high by Brave.[1] None of them is known to be used in attacks.
It has since been replaced by Brave 1.98.62, released 28 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Brave 1.99.55 instead. Brave 1.99.55 came out on 4 Nov 2026 and includes every fix in Brave 1.98.60, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Brave 1.98.60 still safe?
Not any more. The 3 updates since, up to Brave 1.99.55, fix 286 security flaws that Brave 1.98.60 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Brave’s own About Brave page, never from a link in an email, text or pop-up.
What it fixes
Brave lists 353 security flaws, 7 rated critical and 60 high by Brave.[1] The 67 critical and high ones are:
| Flaw | Severity | What Brave calls it |
|---|---|---|
CVE-2026-120931 | Critical | Out of bounds write in WebGL |
CVE-2026-113341 | Critical | Use after free in Skia |
CVE-2026-113279 | Critical | Use after free in Accessibility |
CVE-2026-113072 | Critical | Use after free in CSS |
CVE-2026-113280 | Critical | Use after free in Paint |
CVE-2026-113271 | Critical | Use after free in Accessibility |
CVE-2026-113303 | Critical | Use after free in WebRTC |
CVE-2026-113101 | High | Incorrect authorization in SiteIsolation |
CVE-2026-113097 | High | Missing authorization in FileSystem |
CVE-2026-113098 | High | Type confusion in CacheStorage |
CVE-2026-113242 | High | Uninitialized resource in ANGLE |
CVE-2026-113058 | High | Missing authorization in WebUI |
CVE-2026-113082 | High | Integer overflow in ANGLE |
CVE-2026-113119 | High | Improper certificate validation in Network |
CVE-2026-113092 | High | Missing authorization in Passwords |
CVE-2026-113134 | High | Out of bounds read in ANGLE |
CVE-2026-113222 | High | Missing authorization in V8 |
CVE-2026-113339 | High | Use after free in SVG |
CVE-2026-113317 | High | Use after free in Accessibility |
CVE-2026-113193 | High | Type confusion in V8 |
CVE-2026-113117 | High | Out of bounds read in ANGLE |
CVE-2026-120930 | High | Incorrect authorization in Blink |
CVE-2026-113188 | High | Uninitialized resource in GPU |
CVE-2026-113104 | High | Use after free in Frames |
CVE-2026-113322 | High | Uninitialized resource in Dawn |
CVE-2026-113163 | High | Buffer overflow in WebGL |
CVE-2026-113253 | High | Incorrect authorization in Canvas |
CVE-2026-113298 | High | UI misrepresentation in Transactions Platform |
CVE-2026-113315 | High | Uninitialized resource in ANGLE |
CVE-2026-113236 | High | Improper input validation in Navigation |
| and 37 more | ||
How to update, and how long it takes
A minute or two. Brave restarts and reopens your tabs.
- Open Brave and click the ☰ menu at the top right.Choose About Brave. Brave looks for the update and downloads it by itself.
- Click Relaunch.Brave closes and opens again with the same tabs.
To check it worked: ☰ menu → About Brave: it shows the version, like 1.84.135, and the Chromium it’s built on. It should say 1.98.62 or later.
1.97.59 vs 1.98.60
Brave 1.97.59, released 16 Oct 2026, fixed 10 security flaws. Brave 1.98.60 fixes 353 security flaws and includes the fixes before it, so going straight to 1.98.60 gets you both.
- Before: Brave 1.97.59, 16 Oct 2026, 10 security flaws
- After: Brave 1.98.62, 28 Oct 2026, 52 security flaws
- Brave updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Brave. “Brave Release v1.98.60 (Chromium 156.0.8078.48)”, 21 Oct 2026.