Inappropriate implementation in SVG in Google Chrome prior to 149

#!/usr/bin/env python3
# Check for CVE-2026-11180 exposure by installed Google Chrome version.
# Outputs one of: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import subprocess
import sys
from pathlib import Path

PATCH_VERSION = (149, 0, 7827, 53)


def parse_version(text):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text or '')
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_version(a, b):
    return (a > b) - (a < b)


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return out.strip()
    except Exception:
        return ''


def get_windows_version():
    candidates = [
        r'C:\Program Files\Google\Chrome\Application\chrome.exe',
        r'C:\Program Files (x86)\Google\Chrome\Application\chrome.exe',
        os.path.expandvars(r'%LOCALAPPDATA%\Google\Chrome\Application\chrome.exe'),
    ]
    for exe in candidates:
        if exe and os.path.exists(exe):
            out = run_cmd(['powershell', '-NoProfile', '-Command', f"(Get-Item '{exe}').VersionInfo.ProductVersion"])
            v = parse_version(out)
            if v:
                return exe, v
            out = run_cmd([exe, '--version'])
            v = parse_version(out)
            if v:
                return exe, v
    return None, None


def get_macos_version():
    candidates = [
        '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
        str(Path.home() / 'Applications/Google Chrome.app/Contents/MacOS/Google Chrome'),
    ]
    for exe in candidates:
        if os.path.exists(exe):
            out = run_cmd([exe, '--version'])
            v = parse_version(out)
            if v:
                return exe, v
    plist = '/Applications/Google Chrome.app/Contents/Info.plist'
    if os.path.exists(plist):
        out = run_cmd(['/usr/bin/defaults', 'read', '/Applications/Google Chrome.app/Contents/Info', 'KSVersion'])
        v = parse_version(out)
        if v:
            return plist, v
    return None, None


def get_linux_version():
    commands = [
        ['google-chrome', '--version'],
        ['google-chrome-stable', '--version'],
        ['chromium-browser', '--version'],
        ['chromium', '--version'],
    ]
    for cmd in commands:
        out = run_cmd(cmd)
        v = parse_version(out)
        if v:
            return ' '.join(cmd), v
    candidates = [
        '/opt/google/chrome/chrome',
        '/usr/bin/google-chrome',
        '/usr/bin/google-chrome-stable',
    ]
    for exe in candidates:
        if os.path.exists(exe):
            out = run_cmd([exe, '--version'])
            v = parse_version(out)
            if v:
                return exe, v
    return None, None


def main():
    system = platform.system().lower()
    source, version = None, None

    if 'windows' in system:
        source, version = get_windows_version()
    elif 'darwin' in system:
        source, version = get_macos_version()
    elif 'linux' in system:
        source, version = get_linux_version()
    else:
        print('UNKNOWN: unsupported platform')
        sys.exit(2)

    if not version:
        print('UNKNOWN: Google Chrome version not found')
        sys.exit(2)

    if cmp_version(version, PATCH_VERSION) < 0:
        print(f'VULNERABLE: detected version {".".join(map(str, version))} from {source}; requires >= 149.0.7827.53')
        sys.exit(1)
    else:
        print(f'PATCHED: detected version {".".join(map(str, version))} from {source}; meets >= 149.0.7827.53')
        sys.exit(0)


if __name__ == '__main__':
    main()