Google Chrome Glic use-after-free requiring prior renderer compromise

#!/usr/bin/env python3
# Check Google Chrome version for CVE-2026-10990 exposure
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

THRESHOLD = (149, 0, 7827, 53)


def parse_version(text):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text or '')
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def get_windows_version():
    cmds = [
        ['reg', 'query', r'HKLM\Software\Google\Chrome\BLBeacon', '/v', 'version'],
        ['reg', 'query', r'HKCU\Software\Google\Chrome\BLBeacon', '/v', 'version'],
        ['powershell', '-NoProfile', '-Command', "(Get-Item 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe').VersionInfo.ProductVersion"],
        ['powershell', '-NoProfile', '-Command', "(Get-Item 'C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe').VersionInfo.ProductVersion"]
    ]
    for cmd in cmds:
        out = run_cmd(cmd)
        ver = parse_version(out)
        if ver:
            return ver
    return None


def get_macos_version():
    chrome_bin = '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'
    if os.path.exists(chrome_bin):
        out = run_cmd([chrome_bin, '--version'])
        ver = parse_version(out)
        if ver:
            return ver
    return None


def get_linux_version():
    candidates = ['google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser']
    for name in candidates:
        path = shutil.which(name)
        if path:
            out = run_cmd([path, '--version'])
            ver = parse_version(out)
            if ver:
                return ver
    return None


def main():
    system = platform.system().lower()
    version = None

    if 'windows' in system:
        version = get_windows_version()
    elif 'darwin' in system:
        version = get_macos_version()
    elif 'linux' in system:
        version = get_linux_version()

    if not version:
        print('UNKNOWN: Could not determine installed Google Chrome version')
        sys.exit(2)

    version_str = '.'.join(str(x) for x in version)
    threshold_str = '.'.join(str(x) for x in THRESHOLD)

    if version < THRESHOLD:
        print(f'VULNERABLE: Installed Chrome version {version_str} is older than {threshold_str}')
        sys.exit(1)
    else:
        print(f'PATCHED: Installed Chrome version {version_str} is at or above {threshold_str}')
        sys.exit(0)


if __name__ == '__main__':
    main()