An urgent security update has been issued by Google to patch two zero-day vulnerabilities in the Chrome browser that have been exploited in-the-wild. The flaws are tracked as CVE-2021-37976 and CVE-2021-37975, and are identified to be use-after-free vulnerabilities which if exploited, could allow attackers to bypass Chrome’s security and perform remote code execution (RCE). The addition of these 2 new flaws makes a total of five zero-day exploits patched this month by Google. Chrome users are urged to immediately restart their browsers, or download version 94.0.4606.71 for Windows, Mac, and Linux. The Ankura CTAPT will continue to stay up to date on Google Chrome vulnerabilities and will report on vulnerabilities as well as exploits as they develop in-the-wild.