Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google patches an actively exploited Chrome V8 flaw that allows arbitrary code execution inside the sandbox via a crafted HTML page.
More info