Chromium Views Use-After-Free enabling heap corruption via crafted HTML

#requires -Version 5.1
# Check-CVE-2026-15129.ps1
# Detects Chrome / Edge / Brave builds vulnerable to CVE-2026-15129 (Views UAF)
# Fixed Chrome build: 150.0.7871.115

$ErrorActionPreference = 'SilentlyContinue'
$fixed = [Version]'150.0.7871.115'
$paths = @(
    "$env:ProgramFiles\Google\Chrome\Application\chrome.exe",
    "${env:ProgramFiles(x86)}\Google\Chrome\Application\chrome.exe",
    "$env:LOCALAPPDATA\Google\Chrome\Application\chrome.exe",
    "$env:ProgramFiles\Microsoft\Edge\Application\msedge.exe",
    "${env:ProgramFiles(x86)}\Microsoft\Edge\Application\msedge.exe",
    "$env:ProgramFiles\BraveSoftware\Brave-Browser\Application\brave.exe"
)

$found = $false
$vulnerable = $false

foreach ($p in $paths) {
    if (Test-Path $p) {
        $found = $true
        try {
            $v = [Version](Get-Item $p).VersionInfo.ProductVersion
            if ($v -lt $fixed) {
                Write-Output "VULNERABLE: $p at $v (< $fixed)"
                $vulnerable = $true
            } else {
                Write-Output "PATCHED:    $p at $v"
            }
        } catch {
            Write-Output "UNKNOWN:    $p (could not parse version)"
        }
    }
}

if (-not $found) {
    Write-Output 'UNKNOWN: no Chromium-family browser found in standard install paths'
    exit 2
}
if ($vulnerable) { exit 1 } else { exit 0 }