Google patches two security vulnerabilities in Chrome for Windows, Mac, and Linux, both of which it says are under active exploitation.