Update: proof of concept on GitHub published. Google Chrome on Windows is affected, and it could allow a remote attacker to escape Chrome's sandbox, which is a security boundary that limits what malicious code can do on the system. The attacker could exploit this by getting a user to open a specially crafted file.