Google has issued a patch for a high-severity Chrome zero-day vulnerability that malicious attackers have already exploited.