As part of its February bug fixes, Google is patching a critical severity remote code execution vulnerability and an information disclosure bug.
Source: Threadpost