Google Chrome Glic (Gemini side panel) UI misrepresentation via crafted page

#Requires -Version 5.0
# Check-CVE-2026-14153.ps1
# Reports VULNERABLE / PATCHED / UNKNOWN for Chrome Glic UI-spoof bug
# Fixed in Chrome 150.0.7871.47

$ErrorActionPreference = 'Stop'
$FixedVersion = [Version]'150.0.7871.47'

function Get-ChromeVersion {
    $paths = @(
        'HKLM:\SOFTWARE\Google\Update\Clients\{8A69D345-D564-463C-AFF1-A69D9E530F96}',
        'HKLM:\SOFTWARE\WOW6432Node\Google\Update\Clients\{8A69D345-D564-463C-AFF1-A69D9E530F96}',
        'HKCU:\SOFTWARE\Google\Update\Clients\{8A69D345-D564-463C-AFF1-A69D9E530F96}'
    )
    foreach ($p in $paths) {
        try {
            $v = (Get-ItemProperty -Path $p -ErrorAction Stop).pv
            if ($v) { return [Version]$v }
        } catch {}
    }
    # Fallback: binary FileVersion
    $exe = @(
        "$env:ProgramFiles\Google\Chrome\Application\chrome.exe",
        "${env:ProgramFiles(x86)}\Google\Chrome\Application\chrome.exe",
        "$env:LOCALAPPDATA\Google\Chrome\Application\chrome.exe"
    ) | Where-Object { Test-Path $_ } | Select-Object -First 1
    if ($exe) {
        return [Version]((Get-Item $exe).VersionInfo.ProductVersion)
    }
    return $null
}

$installed = Get-ChromeVersion
if (-not $installed) {
    Write-Output 'UNKNOWN - Chrome not detected'
    exit 2
}

if ($installed -lt $FixedVersion) {
    Write-Output ("VULNERABLE - Chrome {0} < {1}" -f $installed, $FixedVersion)
    exit 1
} else {
    Write-Output ("PATCHED - Chrome {0} >= {1}" -f $installed, $FixedVersion)
    exit 0
}