Zen Browser 1.23.3b ships with Firefox 158's security fixes
Zen Browser's latest build is more about catching up than breaking new ground.
Zen Browser 1.23.3b landed on October 16, 2026, and it's a maintenance build first and foremost. The headline change is an engine upgrade to Firefox 158.0, which pulls in Mozilla's MFSA2026-106 security advisory. That advisory is large and high-impact, covering dozens of vulnerabilities from sandbox escapes to privilege escalations. If you're running Zen on anything older, this update matters.
There's more on the surface. A new --space command-line flag, more accessible PDFs, and smoother scrolling on high-resolution displays round out the release. But the real value here is inheritance. Because Zen tracks Firefox so closely, it picks up this batch of critical fixes without any extra work. The build came out around 22:08 UTC, posted by maintainer mr-cheffy. It's the fourth release in the 1.23 series in about two weeks.
The Firefox 158 upgrade
MFSA2026-106 was announced October 13, 2026. Mozilla now issues one advisory per memory-safety bug instead of bundling them together, so this one is a mouthful, but the highlights are serious: a privilege-escalation bug in the Application Update component (CVE-2026-109704), sandbox escapes tied to use-after-free bugs, and JIT miscompilations in the JavaScript engine. Several were reported by external researchers, including Amy Burnett of OpenAI. That coordinated disclosure ecosystem is what keeps Firefox honest, and Zen riders inherit a slice of it for free.
Keep in mind that users on builds before the Firefox 158 upgrade remain exposed to these holes. It's not the most exciting news around, but it's the whole reason maintenance builds exist.
Here's a warning before you trust a roundup of this release. A Free-CodeCS writeup claimed "Mozilla lists no security advisory against this engine build, so nothing here is urgent on security grounds." That's simply wrong. MFSA2026-106 is the Firefox 158 advisory, and it's cited directly in Zen's own release notes. Head to the GitHub page and Mozilla's advisory page for the truth, since that third-party summary also appears to mix in fixes from other releases.
The rest, and why it ships so fast
On the feature side, the --space <id|name> flag lets you launch Zen and jump straight into a specific Space by ID or name. Handy for shortcuts and scripts. The Library toolbar now shows download speed and an "Open in Folder" option on hover. PDFs got more accessible on Linux and macOS, which also patches rendering issues like missing math symbols, and scrolling no longer snaps to whole-screen pixels, which matters most on high-res displays or when zoomed.
The fix pile is decent too. Zen stopped a Library media-tab bug that forced OneDrive to download every cloud file, killed a memory leak and a favicon-loading crash, and got CUPS printers working inside the Flatpak sandbox again. Windows High Contrast users finally get readable menus.
Zen is a free, open-source Firefox fork from July 2024 whose pitch is basically "Arc, but free." Vertical tabs, workspaces, split view, and Glance all echo the Chromium browser The Browser Company popularized. When Arc stalled in 2025, Zen became the natural heir for users who wanted that layout without watching it gather dust. The coverage has been warm: Liam Proven of The Register praised Zen for being "free of Google code," while Adam Conway at XDA said it "combines the best of Floorp, Vivaldi, Firefox, and Chrome."
Two tradeoffs are worth naming. Zen ships no Widevine DRM, so protected streaming on Netflix or HBO Max simply won't play. You'll keep Chrome or Edge around for those sites, and it's the honest cost of being an independent project. Then there's the trailing "b" in every version number, which means Zen labels its stable channel as beta. Not marketing fluff. That signal explains ongoing rough edges, and it's why this build spent so much time patching the data-loss and memory bugs from earlier in the cycle.
For what it's worth, the 1.23 series still reads like a coherent plan. 1.23b dropped the Library hub. The three patch cycles that following hardened it, taking it from a single new drawer to something you can filter, shortcut, right-click, and partially disable in about two weeks.
Head here to the GitHub release announcement. The release is available in x86_64 and ARM64 builds for Linux, Windows, and macOS as a native installer, Flatpak, AppImage, or tarball.
