Google Chrome Omnibox use-after-free

#!/usr/bin/env python3
# check_chrome_11177.py
# Detect local Chrome/Chromium version and assess exposure to CVE-2026-11177.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys
from typing import Optional, Tuple, List

FIXED_MIN = (149, 0, 7827, 53)

WINDOWS_CANDIDATES = [
    r"C:\Program Files\Google\Chrome\Application\chrome.exe",
    r"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe",
    r"C:\Program Files\Chromium\Application\chrome.exe",
    r"C:\Program Files (x86)\Chromium\Application\chrome.exe",
]

MAC_CANDIDATES = [
    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
    "/Applications/Chromium.app/Contents/MacOS/Chromium",
]

LINUX_CANDIDATES = [
    "google-chrome",
    "google-chrome-stable",
    "chromium",
    "chromium-browser",
    "/usr/bin/google-chrome",
    "/usr/bin/google-chrome-stable",
    "/usr/bin/chromium",
    "/usr/bin/chromium-browser",
]


def run_cmd(cmd: List[str]) -> Optional[str]:
    try:
        p = subprocess.run(cmd, capture_output=True, text=True, timeout=10)
        out = (p.stdout or "") + "\n" + (p.stderr or "")
        return out.strip()
    except Exception:
        return None


def parse_version(text: str) -> Optional[Tuple[int, int, int, int]]:
    if not text:
        return None
    m = re.search(r"(\d+)\.(\d+)\.(\d+)\.(\d+)", text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def version_str(v: Tuple[int, int, int, int]) -> str:
    return ".".join(str(x) for x in v)


def compare_versions(a: Tuple[int, int, int, int], b: Tuple[int, int, int, int]) -> int:
    return (a > b) - (a < b)


def find_linux_binary() -> Optional[str]:
    for c in LINUX_CANDIDATES:
        if os.path.isabs(c) and os.path.exists(c):
            return c
        path = shutil.which(c)
        if path:
            return path
    return None


def find_windows_binary() -> Optional[str]:
    local_app = os.environ.get("LOCALAPPDATA")
    if local_app:
        user_candidate = os.path.join(local_app, "Google", "Chrome", "Application", "chrome.exe")
        if os.path.exists(user_candidate):
            return user_candidate
    for c in WINDOWS_CANDIDATES:
        if os.path.exists(c):
            return c
    return None


def find_mac_binary() -> Optional[str]:
    for c in MAC_CANDIDATES:
        if os.path.exists(c):
            return c
    return None


def get_binary_and_version() -> Tuple[Optional[str], Optional[Tuple[int, int, int, int]], Optional[str]]:
    system = platform.system().lower()

    if system == "windows":
        binary = find_windows_binary()
    elif system == "darwin":
        binary = find_mac_binary()
    else:
        binary = find_linux_binary()

    if not binary:
        return None, None, None

    output = run_cmd([binary, "--version"])
    ver = parse_version(output or "")
    return binary, ver, output


def main() -> int:
    binary, ver, raw = get_binary_and_version()

    if not binary:
        print("UNKNOWN: Chrome/Chromium binary not found")
        return 2

    if not ver:
        print(f"UNKNOWN: Could not parse version from {binary}")
        if raw:
            print(raw)
        return 2

    print(f"Detected: {binary}")
    print(f"Version: {version_str(ver)}")
    print(f"Fixed minimum for CVE-2026-11177: {version_str(FIXED_MIN)}")

    if compare_versions(ver, FIXED_MIN) < 0:
        print("VULNERABLE")
        return 1

    print("PATCHED")
    return 0


if __name__ == "__main__":
    sys.exit(main())