Chrome Media Inappropriate Implementation Cross-Origin Data Leak

#!/usr/bin/env python3
"""CVE-2026-11106 checker — verifies Chrome version >= 149.0.7827.53
Usage: python3 check_cve_2026_11106.py
Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN
"""
import subprocess
import sys
import platform
import re
import os

FIXED_VERSION = (149, 0, 7827, 53)

def parse_version(ver_str):
    parts = ver_str.strip().split(".")
    if len(parts) != 4:
        return None
    try:
        return tuple(int(p) for p in parts)
    except ValueError:
        return None

def get_chrome_version():
    system = platform.system()
    try:
        if system == "Windows":
            import winreg
            for key_path in [
                r"SOFTWARE\Google\Chrome\BLBeacon",
                r"SOFTWARE\WOW6432Node\Google\Chrome\BLBeacon"
            ]:
                try:
                    key = winreg.OpenKey(winreg.HKEY_LOCAL_MACHINE, key_path)
                    val, _ = winreg.QueryValueEx(key, "version")
                    winreg.CloseKey(key)
                    return val.strip()
                except (FileNotFoundError, OSError):
                    continue
            # Fallback to CLI
            for p in [
                os.path.expandvars(r"%ProgramFiles%\Google\Chrome\Application\chrome.exe"),
                os.path.expandvars(r"%ProgramFiles(x86)%\Google\Chrome\Application\chrome.exe"),
                os.path.expandvars(r"%LocalAppData%\Google\Chrome\Application\chrome.exe")
            ]:
                if os.path.exists(p):
                    result = subprocess.run(
                        ["powershell", "-Command", f"(Get-Item '{p}').VersionInfo.FileVersion"],
                        capture_output=True, text=True, timeout=10
                    )
                    if result.returncode == 0 and result.stdout.strip():
                        return result.stdout.strip()
        elif system == "Darwin":
            plist = "/Applications/Google Chrome.app/Contents/Info.plist"
            if os.path.exists(plist):
                result = subprocess.run(
                    ["defaults", "read", plist, "CFBundleShortVersionString"],
                    capture_output=True, text=True, timeout=10
                )
                if result.returncode == 0:
                    return result.stdout.strip()
        else:  # Linux
            for cmd in ["google-chrome", "google-chrome-stable", "chromium-browser", "chromium"]:
                try:
                    result = subprocess.run(
                        [cmd, "--version"],
                        capture_output=True, text=True, timeout=10
                    )
                    if result.returncode == 0:
                        match = re.search(r"(\d+\.\d+\.\d+\.\d+)", result.stdout)
                        if match:
                            return match.group(1)
                except FileNotFoundError:
                    continue
    except Exception as e:
        print(f"Error detecting Chrome: {e}", file=sys.stderr)
    return None

def main():
    ver_str = get_chrome_version()
    if ver_str is None:
        print("UNKNOWN - Chrome not found or version could not be determined")
        sys.exit(2)
    ver_tuple = parse_version(ver_str)
    if ver_tuple is None:
        print(f"UNKNOWN - Could not parse version: {ver_str}")
        sys.exit(2)
    print(f"Detected Chrome version: {ver_str}")
    print(f"Fixed version:           {'.'.join(str(x) for x in FIXED_VERSION)}")
    if ver_tuple >= FIXED_VERSION:
        print("PATCHED - CVE-2026-11106 is fixed in this version")
        sys.exit(0)
    else:
        print("VULNERABLE - CVE-2026-11106 affects this version, update Chrome immediately")
        sys.exit(1)

if __name__ == "__main__":
    main()