Google Chrome Google Lens navigation restriction bypass

#!/usr/bin/env python3
# check_chrome_cve_2026_11248.py
# Determine whether local Google Chrome is vulnerable to CVE-2026-11248
# Affected: Google Chrome versions prior to 149.0.7827.53
# Output: VULNERABLE / PATCHED / UNKNOWN
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

import os
import platform
import re
import shutil
import subprocess
import sys

THRESHOLD = (149, 0, 7827, 53)


def parse_version(text):
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def run_cmd(cmd):
    try:
        p = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, timeout=10)
        out = (p.stdout or '') + '\n' + (p.stderr or '')
        return p.returncode, out.strip()
    except Exception:
        return None, ''


def find_candidates():
    system = platform.system()
    candidates = []

    if system == 'Windows':
        env = os.environ
        paths = [
            os.path.join(env.get('ProgramFiles', r'C:\Program Files'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
            os.path.join(env.get('ProgramFiles(x86)', r'C:\Program Files (x86)'), 'Google', 'Chrome', 'Application', 'chrome.exe'),
            os.path.join(env.get('LocalAppData', ''), 'Google', 'Chrome', 'Application', 'chrome.exe'),
        ]
        candidates.extend([p for p in paths if p])
        where = shutil.which('chrome') or shutil.which('chrome.exe')
        if where:
            candidates.append(where)

    elif system == 'Darwin':
        candidates.extend([
            '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
            os.path.expanduser('~/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'),
        ])
        where = shutil.which('google-chrome') or shutil.which('chrome')
        if where:
            candidates.append(where)

    else:
        candidates.extend([
            '/usr/bin/google-chrome',
            '/usr/bin/google-chrome-stable',
            '/snap/bin/chromium',
            '/usr/bin/chromium-browser',
            '/usr/bin/chromium',
            os.path.expanduser('~/.local/bin/google-chrome'),
        ])
        for name in ('google-chrome', 'google-chrome-stable', 'chromium-browser', 'chromium', 'chrome'):
            where = shutil.which(name)
            if where:
                candidates.append(where)

    # de-dup while preserving order
    seen = set()
    ordered = []
    for c in candidates:
        if c and c not in seen:
            seen.add(c)
            ordered.append(c)
    return ordered


def get_version_from_binary(path):
    if not os.path.exists(path):
        return None, None
    rc, out = run_cmd([path, '--version'])
    if rc is None:
        return None, None
    ver = parse_version(out)
    if ver:
        return path, ver
    return path, None


def compare_versions(a, b):
    return (a > b) - (a < b)


def main():
    candidates = find_candidates()
    found = []

    for path in candidates:
        p, ver = get_version_from_binary(path)
        if p and ver:
            found.append((p, ver))

    if not found:
        print('UNKNOWN: Google Chrome binary not found or version unreadable')
        sys.exit(2)

    # Prefer Google Chrome over Chromium if both are present
    found.sort(key=lambda x: ('chromium' in x[0].lower(), x[0]))
    path, version = found[0]

    version_str = '.'.join(str(x) for x in version)
    threshold_str = '.'.join(str(x) for x in THRESHOLD)

    if compare_versions(version, THRESHOLD) < 0:
        print(f'VULNERABLE: {path} version {version_str} is below fixed version {threshold_str}')
        sys.exit(1)
    else:
        print(f'PATCHED: {path} version {version_str} is at or above fixed version {threshold_str}')
        sys.exit(0)


if __name__ == '__main__':
    main()