Attackers can combine “carpet bomb” bug with another to trick Chrome users into downloading and launching malicious code. The attacks are possible because Google used an older version of WebKit, the open-source rendering engine that also powers Apple’s Safari, as the foundation of Chrome. Israeli researcher Aviv Raff posted a proof-of-concept exploit to demonstrate how hackers could create a new “blended threat” Raff: “This is different from the Safari/IE blended threat””]
Source: https://www.csoonline.com/article/2123128/google-chrome-at-risk-from–carpet-bomb–bug.html