Inappropriate implementation in DOM in Google Chrome prior to 149

#!/usr/bin/env python3
# Check for CVE-2026-11036 exposure based on installed Google Chrome version.
# Outputs one of: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import plistlib
import re
import shutil
import subprocess
import sys

FIXED_VERSION = "149.0.7827.53"


def parse_version(v):
    parts = re.findall(r"\d+", v or "")
    if not parts:
        return None
    return tuple(int(x) for x in parts)


def cmp_version(a, b):
    va = parse_version(a)
    vb = parse_version(b)
    if va is None or vb is None:
        return None
    max_len = max(len(va), len(vb))
    va = va + (0,) * (max_len - len(va))
    vb = vb + (0,) * (max_len - len(vb))
    if va < vb:
        return -1
    if va > vb:
        return 1
    return 0


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        if p.returncode == 0:
            return (p.stdout or p.stderr).strip()
    except Exception:
        pass
    return None


def extract_version(text):
    if not text:
        return None
    m = re.search(r"(\d+\.\d+\.\d+\.\d+)", text)
    return m.group(1) if m else None


def get_linux_version():
    candidates = [
        ["google-chrome", "--version"],
        ["google-chrome-stable", "--version"],
        ["/opt/google/chrome/chrome", "--version"],
        ["chromium-browser", "--version"],
        ["chromium", "--version"],
    ]
    for cmd in candidates:
        exe = cmd[0]
        if exe.startswith("/") or shutil.which(exe):
            out = run_cmd(cmd)
            ver = extract_version(out)
            if ver:
                return ver
    return None


def get_macos_version():
    plist_paths = [
        "/Applications/Google Chrome.app/Contents/Info.plist",
        os.path.expanduser("~/Applications/Google Chrome.app/Contents/Info.plist"),
    ]
    for path in plist_paths:
        if os.path.exists(path):
            try:
                with open(path, "rb") as f:
                    data = plistlib.load(f)
                ver = data.get("KSVersion") or data.get("CFBundleShortVersionString")
                if ver:
                    return ver
            except Exception:
                pass
    return None


def get_windows_version():
    reg_queries = [
        ["reg", "query", r"HKLM\SOFTWARE\Google\Chrome\BLBeacon", "/v", "version"],
        ["reg", "query", r"HKLM\SOFTWARE\WOW6432Node\Google\Chrome\BLBeacon", "/v", "version"],
        ["reg", "query", r"HKCU\SOFTWARE\Google\Chrome\BLBeacon", "/v", "version"],
    ]
    for cmd in reg_queries:
        out = run_cmd(cmd)
        ver = extract_version(out)
        if ver:
            return ver

    file_candidates = [
        os.path.join(os.environ.get("ProgramFiles", r"C:\Program Files"), r"Google\Chrome\Application\chrome.exe"),
        os.path.join(os.environ.get("ProgramFiles(x86)", r"C:\Program Files (x86)"), r"Google\Chrome\Application\chrome.exe"),
        os.path.join(os.environ.get("LOCALAPPDATA", ""), r"Google\Chrome\Application\chrome.exe"),
    ]
    for path in file_candidates:
        if path and os.path.exists(path):
            out = run_cmd([path, "--version"])
            ver = extract_version(out)
            if ver:
                return ver
    return None


def main():
    system = platform.system().lower()
    version = None

    if "windows" in system:
        version = get_windows_version()
    elif "darwin" in system:
        version = get_macos_version()
    elif "linux" in system:
        version = get_linux_version()
    else:
        print("UNKNOWN - unsupported platform: {}".format(platform.system()))
        sys.exit(2)

    if not version:
        print("UNKNOWN - Google Chrome version not found")
        sys.exit(2)

    cmp_result = cmp_version(version, FIXED_VERSION)
    if cmp_result is None:
        print("UNKNOWN - unable to parse installed version: {}".format(version))
        sys.exit(2)

    if cmp_result < 0:
        print("VULNERABLE - installed Chrome version {} is older than fixed {}".format(version, FIXED_VERSION))
        sys.exit(1)
    else:
        print("PATCHED - installed Chrome version {} is at or above fixed {}".format(version, FIXED_VERSION))
        sys.exit(0)


if __name__ == "__main__":
    main()