Illustration: Brave fixes exploited flaw on desktop; Android update pending
Brave · Exploitation confirmed

Brave fixes exploited flaw on desktop; Android update pending

· 1 min read

Brave says version 1.99.56 fixes a Chromium vulnerability exploited in the wild on desktop. The Android update is still awaiting Google Play Store review. Desktop users should confirm the update through About Brave.

WhatsApp LinkedIn X
CriticalVulnerabilityExploitation confirmedPartial fix
In this article
  1. What happened
  2. Why it matters
  3. What to do
  4. For the technical team
  5. Timeline
  6. Sources

What happened

Brave released version 1.99.56 to fix a Chromium vulnerability exploited in the wild on desktop. The Android update is still awaiting Google Play Store review.

Incidents like this, every morning

The ones that need action first, in a 3-minute read.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Why it matters

Active exploitation creates an immediate risk for organizations using Brave. The source does not specify which data or operations could be affected.

What to do

Update desktops to Brave 1.99.56 and confirm the version through About Brave. On Android, install the update when it becomes available.

For the technical team

Affected
Brave · Brave for desktop and Android; vulnerable versions were not specified.
Exploitation
Brave says the vulnerability was exploited in the wild.
Fix
Brave 1.99.56 for desktop. The Android update is awaiting Google Play Store review.
Vector
Chromium vulnerability in Brave. The specific component, flaw type, and exploitation conditions were not provided.
More details
Brave says users may already have received the automatic update. The manual update option is available through About Brave in the browser menu.

Timeline

  1. Brave fixed the flaw on desktop, while the Android update remains pending.

Sources 1 source

Get the next one tomorrow morning

One email a day with what changed, what to fix first and how.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click

Share it with your team

Whoever handles security with you should get it too.

LinkedIn X

Your colleague gets a confirmation request. Nothing is sent unless they confirm.

See all news

Read also

Before you go: get this every day

The HIFY Radar daily edition lands every morning with the incidents that need action. Free.

Free · 1 email a day, in the morning · no spam, unsubscribe in 1 click