According to reports, this is a zero day vulnerability that is actually used for attacks.

The vulnerability could allow a remote and unidentified attacker to execute a remote code execution (RCE).

Make sure the CHROME version is up to date

The vulnerability has been fixed in version 72.0.3626.121