Google Chrome DevTools input validation flaw enabling navigation restriction bypass via malicious extension

# check-chrome-cve-2026-11189.ps1

# Exit codes:

#   0 = PATCHED

#   1 = VULNERABLE

#   2 = UNKNOWN


$ErrorActionPreference = 'Stop'
$fixedVersion = [version]'149.0.7827.53'
$paths = @(
    "$env:ProgramFiles\Google\Chrome\Application\chrome.exe",
    "$env:ProgramFiles(x86)\Google\Chrome\Application\chrome.exe",
    "$env:LocalAppData\Google\Chrome\Application\chrome.exe"
)

function Get-ChromeVersionFromPath {
    param([string]$Path)
    if (-not (Test-Path -LiteralPath $Path)) { return $null }
    try {
        $item = Get-Item -LiteralPath $Path
        $ver = $item.VersionInfo.ProductVersion
        if (-not $ver) { $ver = $item.VersionInfo.FileVersion }
        if ($ver) { return [version]$ver }
    } catch {
        return $null
    }
    return $null
}

$found = @()
foreach ($p in $paths) {
    $v = Get-ChromeVersionFromPath -Path $p
    if ($v) {
        $found += [pscustomobject]@{ Path = $p; Version = $v }
    }
}

if ($found.Count -eq 0) {
    Write-Output 'UNKNOWN - Chrome executable not found in standard paths'
    exit 2
}

$minFound = ($found | Sort-Object Version | Select-Object -First 1)
if ($minFound.Version -lt $fixedVersion) {
    Write-Output ("VULNERABLE - Found Chrome {0} at {1}; fixed version is {2}" -f $minFound.Version, $minFound.Path, $fixedVersion)
    exit 1
} else {
    Write-Output ("PATCHED - Lowest detected Chrome version is {0}; fixed baseline is {1}" -f $minFound.Version, $fixedVersion)
    exit 0
}