A serious Chrome vulnerability patched recently by Google allowed hackers to execute arbitrary code on a system by using malicious PDF documents.
The vulnerability, discovered by Aleksandar Nikolic of Cisco Talos, is a heap buffer overflow (CVE-2016-1681) affecting PDFium, the default PDF reader in the Chrome web browser.