Google Chrome before 21.0.1180.57 on Linux does not properly handle tabs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html