Google patches a sandbox escape Chrome that an attacker can exploit by luring a target to a malicious web page.