Google Chrome XML inappropriate implementation leading to UXSS via crafted XML file

#!/usr/bin/env python3
# check_cve_2026_11169.py
# Detects whether installed Google Chrome is vulnerable to CVE-2026-11169
# Exit codes:
#   0 = PATCHED
#   1 = VULNERABLE
#   2 = UNKNOWN / Chrome not found / parse failure

import os
import platform
import re
import subprocess
import sys
from pathlib import Path

FIXED_VERSION = (149, 0, 7827, 53)


def parse_version(text):
    if not text:
        return None
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def get_version_windows():
    candidates = [
        Path(os.environ.get('PROGRAMFILES', r'C:\Program Files')) / 'Google/Chrome/Application/chrome.exe',
        Path(os.environ.get('PROGRAMFILES(X86)', r'C:\Program Files (x86)')) / 'Google/Chrome/Application/chrome.exe',
        Path(os.environ.get('LOCALAPPDATA', '')) / 'Google/Chrome/Application/chrome.exe',
    ]
    for exe in candidates:
        if exe and exe.exists():
            out = run_cmd(['powershell', '-NoProfile', '-Command', f"(Get-Item '{str(exe)}').VersionInfo.ProductVersion"])
            ver = parse_version(out)
            if ver:
                return str(exe), ver
    return None, None


def get_version_macos():
    candidates = [
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        str(Path.home() / 'Applications/Google Chrome.app/Contents/MacOS/Google Chrome')
    ]
    for exe in candidates:
        if Path(exe).exists():
            out = run_cmd([exe, '--version'])
            ver = parse_version(out)
            if ver:
                return exe, ver
    return None, None


def get_version_linux():
    commands = [
        ['google-chrome', '--version'],
        ['google-chrome-stable', '--version'],
        ['chromium-browser', '--version'],
        ['chromium', '--version'],
    ]
    for cmd in commands:
        out = run_cmd(cmd)
        ver = parse_version(out)
        if ver and ('chrome' in out.lower() or 'chromium' in out.lower()):
            return ' '.join(cmd[:-1]), ver

    candidates = [
        '/opt/google/chrome/google-chrome',
        '/usr/bin/google-chrome',
        '/usr/bin/google-chrome-stable',
    ]
    for exe in candidates:
        if Path(exe).exists():
            out = run_cmd([exe, '--version'])
            ver = parse_version(out)
            if ver:
                return exe, ver
    return None, None


def compare_versions(installed, fixed):
    if installed < fixed:
        return 'VULNERABLE'
    return 'PATCHED'


def main():
    system = platform.system().lower()
    path = None
    version = None

    if 'windows' in system:
        path, version = get_version_windows()
    elif 'darwin' in system:
        path, version = get_version_macos()
    elif 'linux' in system:
        path, version = get_version_linux()
    else:
        print('UNKNOWN: unsupported platform')
        sys.exit(2)

    if not version:
        print('UNKNOWN: Google Chrome not found or version unreadable')
        sys.exit(2)

    result = compare_versions(version, FIXED_VERSION)
    version_str = '.'.join(str(x) for x in version)
    fixed_str = '.'.join(str(x) for x in FIXED_VERSION)
    print(f'{result}: installed={version_str} fixed={fixed_str} path={path}')

    if result == 'PATCHED':
        sys.exit(0)
    elif result == 'VULNERABLE':
        sys.exit(1)
    else:
        sys.exit(2)


if __name__ == '__main__':
    main()