Google has confirmed a new and actively exploited zero-day security vulnerability targeting Android users.