Bugs in Chrome's V8 JavaScript engine, which runs dynamic content on websites, are the source of the security flaws.