There have been exploits and there will probably be more in the future, see e.g. https://googleprojectzero.blogspot.com/2020/09/attacking-qua...