Google Chrome IndexedDB insufficient validation of untrusted input

#!/usr/bin/env python3
# Check Chrome patch status for CVE-2026-11246
# Outputs: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import subprocess
import sys
from pathlib import Path


def parse_version(s):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', s or '')
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def cmp_ver(a, b):
    return (a > b) - (a < b)


def get_windows_version():
    try:
        import winreg
    except Exception:
        winreg = None

    # Registry first
    if winreg:
        keys = [
            r'SOFTWARE\Google\Chrome\BLBeacon',
            r'SOFTWARE\WOW6432Node\Google\Chrome\BLBeacon'
        ]
        for hive in (winreg.HKEY_CURRENT_USER, winreg.HKEY_LOCAL_MACHINE):
            for key in keys:
                try:
                    with winreg.OpenKey(hive, key) as k:
                        value, _ = winreg.QueryValueEx(k, 'version')
                        v = parse_version(value)
                        if v:
                            return v, value, 'registry'
                except Exception:
                    pass

    # Executable fallback
    paths = [
        os.path.expandvars(r'%ProgramFiles%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%ProgramFiles(x86)%\Google\Chrome\Application\chrome.exe'),
        os.path.expandvars(r'%LocalAppData%\Google\Chrome\Application\chrome.exe'),
    ]
    for p in paths:
        if os.path.exists(p):
            try:
                out = subprocess.check_output([
                    'powershell', '-NoProfile', '-Command',
                    f"(Get-Item '{p}').VersionInfo.ProductVersion"
                ], text=True, stderr=subprocess.DEVNULL).strip()
                v = parse_version(out)
                if v:
                    return v, out, p
            except Exception:
                pass
    return None, None, None


def get_macos_version():
    p = '/Applications/Google Chrome.app/Contents/Info.plist'
    if os.path.exists(p):
        try:
            out = subprocess.check_output([
                '/usr/bin/defaults', 'read',
                '/Applications/Google Chrome.app/Contents/Info',
                'CFBundleShortVersionString'
            ], text=True, stderr=subprocess.DEVNULL).strip()
            v = parse_version(out)
            if v:
                return v, out, p
        except Exception:
            pass
    return None, None, None


def get_linux_version():
    cmds = [
        ['google-chrome', '--version'],
        ['google-chrome-stable', '--version'],
        ['chromium-browser', '--version'],
        ['chromium', '--version'],
    ]
    for cmd in cmds:
        try:
            out = subprocess.check_output(cmd, text=True, stderr=subprocess.DEVNULL).strip()
            v = parse_version(out)
            if v:
                return v, out, ' '.join(cmd)
        except Exception:
            pass

    paths = [
        '/opt/google/chrome/chrome',
        '/usr/bin/google-chrome',
        '/usr/bin/google-chrome-stable',
        '/usr/bin/chromium-browser',
        '/usr/bin/chromium',
    ]
    for p in paths:
        if os.path.exists(p):
            try:
                out = subprocess.check_output([p, '--version'], text=True, stderr=subprocess.DEVNULL).strip()
                v = parse_version(out)
                if v:
                    return v, out, p
            except Exception:
                pass
    return None, None, None


def main():
    system = platform.system()
    version = raw = source = None

    if system == 'Windows':
        version, raw, source = get_windows_version()
        patched_min = (149, 0, 7827, 53)  # Windows/Mac patched at 53/54
    elif system == 'Darwin':
        version, raw, source = get_macos_version()
        patched_min = (149, 0, 7827, 53)  # Windows/Mac patched at 53/54
    elif system == 'Linux':
        version, raw, source = get_linux_version()
        patched_min = (149, 0, 7827, 53)
    else:
        print('UNKNOWN - unsupported OS')
        sys.exit(2)

    if not version:
        print('UNKNOWN - Chrome version not found')
        sys.exit(2)

    if cmp_ver(version, patched_min) >= 0:
        print(f'PATCHED - detected {raw} via {source}')
        sys.exit(0)
    else:
        print(f'VULNERABLE - detected {raw} via {source}; needs >= {patched_min[0]}.{patched_min[1]}.{patched_min[2]}.{patched_min[3]}')
        sys.exit(1)


if __name__ == '__main__':
    main()