An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.
This is a companion discussion topic for the original entry at https://threatpost.com/google-patches-chromes-fifth-zero-day-of-the-year/180432/