Dia Browser Patches 429 Security Flaws in macOS Update
The Browser Company has released Dia version 1.34.1 (build 81705) for macOS, patching 429 security vulnerabilities through an upgrade to Chromium 149, the latest stable version of the open-source browser engine that powers most major browsers.
The company recommends users apply the update immediately.
What the Update Fixes
The 429 flaws include high-severity issues such as memory corruption and sandbox escapes — bugs that can allow malicious code to break out of a browser’s isolated environment and access the wider operating system.
The update also introduces “Out of Process Web Page Reading,” an architecture-level change that handles webpage rendering in a separate system process, further isolating the browser from potentially harmful content.
Where to Find the Release Notes
The Browser Company has not yet published these release notes to Dia’s official changelog page.
Instead, details emerged through the r/diabrowser subreddit, where user JaceThings regularly tracks new builds and posts accurate version details shortly after each release.
Which Version to Install
Version 1.34.1 carries the Security Fixes, but it is not the most current build at time of publication.
The Browser Company has since pushed version 1.34.2 (build 81865), a minor update that does not introduce additional security patches but represents the latest available release.
Users still running builds older than 1.34.1 should update to 1.34.2 to ensure they receive both the security fixes and any subsequent stability improvements.
Broader Chromium Context
The Chromium 149 engine upgrade also connects to a broader security push across Chromium-based browsers.
Google separately patched a zero-day vulnerability — a flaw Actively Exploited before a fix exists — within the same Chromium 149 release cycle for Chrome.
Chromium serves as the open-source foundation for Dia, Chrome, Microsoft Edge, and several other browsers, meaning engine-level patches carry across the ecosystem simultaneously.
The Browser Company launched Dia as a successor to its earlier Arc browser, positioning it around AI-assisted browsing features. The company recently began quietly winding down Dia’s Pro subscription tier.
