Google Chrome flaw patched three years after initial report