Not many people actively look for bugs like this. It usually takes a chance discovery to be made widely know before someone else realizes that they have everything needed to do something like this.

If people actively looked, like they scrutinize modern software, these things would be fully understood, or at least fully documented, in no time. But, as I said, almost no one looks.