Chrome for iOS UI spoofing via inappropriate implementation

#!/usr/bin/env python3
# check_cve_2026_11285.py
# Determine whether Google Chrome for iOS is vulnerable to CVE-2026-11285
# Fixed version: 149.0.7827.53
# Exit codes:
#   0 = all checked entries PATCHED
#   1 = one or more checked entries VULNERABLE
#   2 = UNKNOWN / input error / no valid rows

import argparse
import csv
import re
import sys
from typing import Optional, Tuple

FIXED = (149, 0, 7827, 53)


def parse_version(v: str) -> Optional[Tuple[int, int, int, int]]:
    if v is None:
        return None
    v = v.strip()
    m = re.search(r'(\d+)\.(\d+)\.(\d+)\.(\d+)', v)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def classify(v: str) -> str:
    parsed = parse_version(v)
    if parsed is None:
        return 'UNKNOWN'
    if parsed < FIXED:
        return 'VULNERABLE'
    return 'PATCHED'


def check_single(version: str) -> int:
    result = classify(version)
    print(result)
    if result == 'PATCHED':
        return 0
    if result == 'VULNERABLE':
        return 1
    return 2


def check_csv(path: str, column: str) -> int:
    vulnerable = 0
    patched = 0
    unknown = 0
    valid_rows = 0

    try:
        with open(path, newline='', encoding='utf-8-sig') as f:
            reader = csv.DictReader(f)
            if not reader.fieldnames:
                print('UNKNOWN - CSV has no header row')
                return 2
            if column not in reader.fieldnames:
                print(f"UNKNOWN - column '{column}' not found. Available columns: {', '.join(reader.fieldnames)}")
                return 2

            name_col = None
            for candidate in ('DeviceName', 'device_name', 'Device', 'Name', 'SerialNumber', 'UDID'):
                if candidate in reader.fieldnames:
                    name_col = candidate
                    break

            for idx, row in enumerate(reader, start=1):
                version = row.get(column, '')
                status = classify(version)
                identifier = row.get(name_col, f'row-{idx}') if name_col else f'row-{idx}'
                print(f'{identifier}: {status} ({version})')

                if status == 'VULNERABLE':
                    vulnerable += 1
                    valid_rows += 1
                elif status == 'PATCHED':
                    patched += 1
                    valid_rows += 1
                else:
                    unknown += 1

    except FileNotFoundError:
        print(f'UNKNOWN - file not found: {path}')
        return 2
    except Exception as e:
        print(f'UNKNOWN - failed to read CSV: {e}')
        return 2

    print(f'SUMMARY: PATCHED={patched} VULNERABLE={vulnerable} UNKNOWN={unknown}')

    if valid_rows == 0:
        print('UNKNOWN')
        return 2
    if vulnerable > 0:
        print('VULNERABLE')
        return 1
    print('PATCHED')
    return 0


def main() -> int:
    parser = argparse.ArgumentParser(description='Check Chrome for iOS versions against CVE-2026-11285')
    group = parser.add_mutually_exclusive_group(required=True)
    group.add_argument('--version', help='Single Chrome for iOS version string, e.g. 149.0.7827.45')
    group.add_argument('--csv', help='CSV exported from MDM/app inventory')
    parser.add_argument('--column', default='AppVersion', help='CSV column containing Chrome version strings (default: AppVersion)')
    args = parser.parse_args()

    if args.version:
        return check_single(args.version)
    return check_csv(args.csv, args.column)


if __name__ == '__main__':
    sys.exit(main())