Privacy Browser Brave Released Update to Fix Chromium Vulnerability

On April 20th, according to official Twitter, the privacy browser Brave desktop version released v1.50.121 update, which includes a fix for a Chromium vulnerability that has been discovered to be exploited in the wild. The user may have received automatic Brave updates, but if not, they can manually update by accessing ‘About Brave’ through the browser’s menu. The Android update is waiting for review by the Google Play store and should be released soon.

Brave Browser Desktop Version Release v1.50.121 Update

On April 20th, the privacy browser Brave desktop version released v1.50.121 update to fix a Chromium vulnerability. The flaw was discovered to be exploited in the wild, meaning it was actively being taken advantage of by attackers. If users do not have automatic updates turned on for the Brave browser, they can manually update by accessing ‘About Brave’ through the browser’s menu.

What is the Brave Browser?

Before diving into the update, let’s start with a brief overview of the Brave browser. Brave is a free, open-source web browser that emphasizes privacy and security for its users. Some of its notable features include blocking ads and trackers by default, HTTPS Everywhere integration, and a built-in Tor browsing mode. Brave also has its own cryptocurrency, Basic Attention Token (BAT), that users can earn by viewing ads and then use to support their favorite websites or content creators.

The Chromium Vulnerability

Chromium is the open-source browser project that serves as the foundation for many popular web browsers, including Google Chrome. The vulnerability discovered in Chromium was a type confusion issue in its V8 JavaScript engine. Type confusion occurs when a program tries to read or write memory in a way that assumes it has a certain data type, but that data type is no longer valid. This can lead to unexpected behavior, including crashes or even remote code execution by attackers.

The Fix

Thankfully, the Brave team quickly released a fix for the vulnerability in version v1.50.121. Brave noted in its release announcement that the fix was based on a patch created by Google for the same issue. This indicates that the vulnerability was likely present in Google Chrome as well, although it is unclear if it was actively being exploited in Chrome as well. Brave users who have automatic updates turned on should have received the fix already, but those who do not can manually update their browser by going to ‘About Brave’ in the browser menu.

Android Update on the Way

While the desktop version of Brave has already received the update, the Android version is still waiting for review by the Google Play store. Brave noted on its Twitter account that the Android update should be released soon. In the meantime, Android users should exercise caution when browsing the web and keep an eye out for any suspicious activity.

Conclusion

The Brave browser’s commitment to privacy and security is commendable, and their quick response to this Chromium vulnerability is evidence of their dedication to keeping their users safe. The fix has been widely praised by the cybersecurity community, and users can update their browser with peace of mind. As always, it is important to stay vigilant when browsing the web and to keep your software up to date with the latest security updates.

FAQs

1. What is the difference between Brave and Chrome?
Brave is based on Chromium, just like Chrome, but with added privacy and security features, such as built-in ad and tracker blocking and HTTPS Everywhere integration.
2. Is the Brave browser completely secure?
No software is completely secure, but Brave takes many measures to enhance its security, such as blocking third-party cookies and implementing end-to-end encryption for Brave Sync.
3. Can I use Brave on my mobile device?
Yes, Brave is available for both iOS and Android devices.