V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.
https://www.trendmicro.com/en_us/research/24/l/earth-minotaur.html
https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop.html