Google Chrome for macOS Shortcuts navigation restriction bypass

#!/bin/bash
# verify_cve_2026_11283.sh
# Checks whether Google Chrome on macOS is below 149.0.7827.53
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN

TARGET_VERSION="149.0.7827.53"
APP_PATH="${1:-/Applications/Google Chrome.app}"
PLIST="$APP_PATH/Contents/Info.plist"

compare_versions() {
  # returns 0 if equal, 1 if $1 > $2, 2 if $1 < $2
  local IFS=.
  local i
  local -a v1=($1) v2=($2)

  for ((i=${#v1[@]}; i<4; i++)); do v1[i]=0; done
  for ((i=${#v2[@]}; i<4; i++)); do v2[i]=0; done

  for i in 0 1 2 3; do
    if ((10#${v1[i]} > 10#${v2[i]})); then
      return 1
    elif ((10#${v1[i]} < 10#${v2[i]})); then
      return 2
    fi
  done
  return 0
}

if [[ "$(uname -s)" != "Darwin" ]]; then
  echo "UNKNOWN: This verification script is intended for macOS (Darwin)."
  exit 2
fi

if [[ ! -d "$APP_PATH" ]]; then
  echo "UNKNOWN: Chrome app not found at $APP_PATH"
  exit 2
fi

if [[ ! -f "$PLIST" ]]; then
  echo "UNKNOWN: Info.plist not found at $PLIST"
  exit 2
fi

INSTALLED_VERSION=$(/usr/bin/defaults read "$PLIST" CFBundleShortVersionString 2>/dev/null)

if [[ -z "$INSTALLED_VERSION" ]]; then
  echo "UNKNOWN: Could not read Chrome version from $PLIST"
  exit 2
fi

compare_versions "$INSTALLED_VERSION" "$TARGET_VERSION"
RESULT=$?

case $RESULT in
  2)
    echo "VULNERABLE: Chrome $INSTALLED_VERSION is below $TARGET_VERSION"
    exit 1
    ;;
  0|1)
    echo "PATCHED: Chrome $INSTALLED_VERSION is at or above $TARGET_VERSION"
    exit 0
    ;;
  *)
    echo "UNKNOWN: Version comparison failed"
    exit 2
    ;;
esac