Google has patched an actively exploited Chrome V8 zero-day that lets attackers run code inside the sandbox via a crafted web page.