Two vulnerabilities have been reported in Google Chrome, which can be exploited by malicious people to conduct cross-site scripting attacks or to disclose sensitive information.

1) A vulnerability in the Adobe Reader plug-in can be exploited by malicious people to conduct cross-site scripting attacks.

For more information:
SA23483

2) An error exists in the V8 JavaScript engine, which can be exploited to read e.g. the full URL and potentially other attributes or data from another frame in a different domain.

The vulnerabilities are reported in versions prior to version 1.0.154.46.

Solution
Update to version 1.0.154.46.

Provided and/or discovered by
1) The vendor credits Michael Schmidt.
2) Reported by the vendor.

Original Advisory
http://googlechromereleases.blogspot.com/2009/01/stable-beta-update-yahoo-mail-and.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area