Google says a new vulnerability is already being exploited by cyberattacks, with Chrome users on Windows, Mac and Linux told to apply the fix as soon as possible.