Chrome for iOS insufficient input validation allowing limited UI/state spoofing via crafted page

#!/usr/bin/env bash
# noisgate: CVE-2026-14137 Chrome for iOS version check
# Usage: ./check_chrome_ios.sh <fixed_version>
# Exit codes: 0 PATCHED, 1 VULNERABLE, 2 UNKNOWN
set -euo pipefail

FIXED_VERSION="${1:-150.0.7871.47}"
BUNDLE_ID="com.google.chrome.ios"

# --- version compare: returns 0 if $1 >= $2 ---
ver_ge() {
  [ "$(printf '%s\n%s\n' "$2" "$1" | sort -V | head -n1)" = "$2" ]
}

# --- MDM_QUERY: replace with your platform's API call ---
# Expected output: one line per device: <device_id>,<installed_version>
MDM_QUERY() {
  # Example placeholder — replace with real API call
  # curl -s -H "Authorization: Bearer $TOKEN" \
  #   "https://graph.microsoft.com/v1.0/deviceAppManagement/..." \
  #   | jq -r '.value[] | [.deviceId, .version] | @csv'
  echo "SAMPLE-DEVICE-01,150.0.7871.47"
  echo "SAMPLE-DEVICE-02,149.0.7800.10"
}

vuln=0; patched=0; unknown=0
while IFS=, read -r device version; do
  version="${version//\"/}"
  if [ -z "$version" ] || [ "$version" = "null" ]; then
    echo "UNKNOWN $device (no version reported)"
    unknown=$((unknown+1))
    continue
  fi
  if ver_ge "$version" "$FIXED_VERSION"; then
    echo "PATCHED  $device $version"
    patched=$((patched+1))
  else
    echo "VULNERABLE $device $version"
    vuln=$((vuln+1))
  fi
done < <(MDM_QUERY)

echo
echo "Summary: VULNERABLE=$vuln PATCHED=$patched UNKNOWN=$unknown"

if [ "$vuln" -gt 0 ]; then
  echo "RESULT: VULNERABLE"
  exit 1
elif [ "$unknown" -gt 0 ] && [ "$patched" -eq 0 ]; then
  echo "RESULT: UNKNOWN"
  exit 2
else
  echo "RESULT: PATCHED"
  exit 0
fi