Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities in Google Chrome (including an integer overflow in V8 and use-after-free in WebRTC) could allow an attacker to achieve arbitrary code execution in the context of the logged-on user via drive-by compromise. Impact ranges from data access and program installation to account creation depending on user privileges; no evidence of active exploitation is provided in the report.