Are these exploits publicly documented?
Some exploit authors love writing up their work. For example:
https://googleprojectzero.blogspot.com/2016/12/chrome-os-exp...
Not backend.