Inappropriate implementation in Printing in Google Chrome prior to 149

#!/usr/bin/env python3
# chrome_cve_2026_11093_check.py
# Detect whether Google Chrome Desktop is patched for CVE-2026-11093 by version.
# Output: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import plistlib
import re
import subprocess
import sys

TARGET_LINUX = (149, 0, 7827, 53)
TARGET_STABLE = (149, 0, 7827, 53)
TARGET_EXTENDED = (148, 0, 7778, 254)


def parse_version(s):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', s or '')
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_ver(a, b):
    return (a > b) - (a < b)


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + ' ' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def get_version_linux():
    candidates = [
        ['google-chrome', '--version'],
        ['google-chrome-stable', '--version'],
        ['chromium', '--version'],
        ['chromium-browser', '--version'],
    ]
    for cmd in candidates:
        out = run_cmd(cmd)
        ver = parse_version(out)
        if ver:
            return ver, ' '.join(cmd)
    return None, ''


def get_version_macos():
    paths = [
        '/Applications/Google Chrome.app/Contents/Info.plist',
        os.path.expanduser('~/Applications/Google Chrome.app/Contents/Info.plist'),
    ]
    for path in paths:
        if os.path.exists(path):
            try:
                with open(path, 'rb') as f:
                    data = plistlib.load(f)
                ver = parse_version(data.get('KSVersion', '') or data.get('CFBundleShortVersionString', ''))
                if ver:
                    return ver, path
            except Exception:
                pass
    return None, ''


def get_version_windows():
    try:
        import winreg
    except Exception:
        winreg = None

    reg_paths = [
        (0x80000002, r'SOFTWARE\Google\Chrome\BLBeacon'),
        (0x80000001, r'SOFTWARE\Google\Chrome\BLBeacon'),
        (0x80000002, r'SOFTWARE\WOW6432Node\Google\Chrome\BLBeacon'),
    ]

    if winreg is not None:
        for hive_const, subkey in reg_paths:
            try:
                hive = hive_const
                key = winreg.OpenKey(hive, subkey)
                version, _ = winreg.QueryValueEx(key, 'version')
                ver = parse_version(version)
                if ver:
                    return ver, 'registry:' + subkey
            except Exception:
                pass

    paths = [
        os.path.expandvars(r'%ProgramFiles%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%ProgramFiles(x86)%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%LocalAppData%\Google\Chrome\Application\chrome.exe'),
    ]
    for path in paths:
        if os.path.exists(path):
            out = run_cmd([path, '--version'])
            ver = parse_version(out)
            if ver:
                return ver, path
    return None, ''


def assess(ver, system_name):
    if ver is None:
        return 'UNKNOWN', 2, 'Could not determine Chrome version'

    if system_name == 'Linux':
        if cmp_ver(ver, TARGET_LINUX) >= 0:
            return 'PATCHED', 0, 'Chrome version meets Linux fixed version'
        return 'VULNERABLE', 1, 'Chrome version is below Linux fixed version 149.0.7827.53'

    if system_name in ('Darwin', 'Windows'):
        if cmp_ver(ver, TARGET_STABLE) >= 0:
            return 'PATCHED', 0, 'Chrome version meets Stable fixed version'
        if ver[:3] == TARGET_EXTENDED[:3] and cmp_ver(ver, TARGET_EXTENDED) >= 0:
            return 'PATCHED', 0, 'Chrome version meets Extended Stable fixed version'
        return 'VULNERABLE', 1, 'Chrome version is below fixed Stable/Extended Stable versions'

    return 'UNKNOWN', 2, 'Unsupported platform'


def main():
    sysname = platform.system()
    ver = None
    source = ''

    if sysname == 'Linux':
        ver, source = get_version_linux()
    elif sysname == 'Darwin':
        ver, source = get_version_macos()
    elif sysname == 'Windows':
        ver, source = get_version_windows()
    else:
        print('UNKNOWN')
        sys.exit(2)

    status, rc, reason = assess(ver, sysname)
    if ver:
        print(f'{status} - detected Chrome version {".".join(map(str, ver))} via {source} - {reason}')
    else:
        print(f'{status} - {reason}')
    sys.exit(rc)


if __name__ == '__main__':
    main()