Insufficient policy enforcement in Actor in Google Chrome prior to 149

#!/usr/bin/env python3
# Check Google Chrome version for CVE-2026-11018
# Outputs: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

THRESHOLD = (149, 0, 7827, 53)
VERSION_RE = re.compile(r'(\d+)\.(\d+)\.(\d+)\.(\d+)')


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10, shell=False)
        if p.returncode == 0:
            return (p.stdout or p.stderr).strip()
    except Exception:
        pass
    return None


def parse_version(text):
    if not text:
        return None
    m = VERSION_RE.search(text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def get_windows_version():
    # Try BLBeacon registry first (most reliable without admin rights)
    reg_paths = [
        ["reg", "query", r"HKCU\Software\Google\Chrome\BLBeacon", "/v", "version"],
        ["reg", "query", r"HKLM\Software\Google\Chrome\BLBeacon", "/v", "version"],
        ["reg", "query", r"HKLM\Software\WOW6432Node\Google\Chrome\BLBeacon", "/v", "version"],
    ]
    for cmd in reg_paths:
        out = run_cmd(cmd)
        ver = parse_version(out)
        if ver:
            return ver, "registry"

    # Fallback to common executable paths
    candidates = [
        os.path.join(os.environ.get("ProgramFiles", r"C:\Program Files"), "Google", "Chrome", "Application", "chrome.exe"),
        os.path.join(os.environ.get("ProgramFiles(x86)", r"C:\Program Files (x86)"), "Google", "Chrome", "Application", "chrome.exe"),
        os.path.join(os.environ.get("LOCALAPPDATA", ""), "Google", "Chrome", "Application", "chrome.exe"),
    ]
    for path in candidates:
        if path and os.path.exists(path):
            out = run_cmd([path, "--version"])
            ver = parse_version(out)
            if ver:
                return ver, path
    return None, None


def get_macos_version():
    candidates = [
        "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
        os.path.expanduser("~/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"),
    ]
    for path in candidates:
        if os.path.exists(path):
            out = run_cmd([path, "--version"])
            ver = parse_version(out)
            if ver:
                return ver, path
    return None, None


def get_linux_version():
    candidates = ["google-chrome", "google-chrome-stable"]
    for name in candidates:
        path = shutil.which(name)
        if path:
            out = run_cmd([path, "--version"])
            ver = parse_version(out)
            if ver:
                return ver, path
    return None, None


def compare_versions(found, threshold):
    if found is None:
        return None
    return found >= threshold


def main():
    system = platform.system().lower()
    if system == "windows":
        ver, source = get_windows_version()
    elif system == "darwin":
        ver, source = get_macos_version()
    elif system == "linux":
        ver, source = get_linux_version()
    else:
        print("UNKNOWN")
        print(f"Unsupported platform: {platform.system()}")
        sys.exit(2)

    if ver is None:
        print("UNKNOWN")
        print("Google Chrome version not found")
        sys.exit(2)

    status = compare_versions(ver, THRESHOLD)
    ver_str = ".".join(str(x) for x in ver)
    threshold_str = ".".join(str(x) for x in THRESHOLD)

    if status is True:
        print("PATCHED")
        print(f"Detected Chrome {ver_str} from {source}; threshold is {threshold_str}")
        sys.exit(0)
    elif status is False:
        print("VULNERABLE")
        print(f"Detected Chrome {ver_str} from {source}; threshold is {threshold_str}")
        sys.exit(1)
    else:
        print("UNKNOWN")
        sys.exit(2)


if __name__ == "__main__":
    main()