Google has released an out-of-band Chrome update to patch two zero-day vulnerabilities that are already being actively exploited.