By sending a specially crafted request, an attacker could exploit the CVE-2022-37969 vulnerability to gain elevated privileges.
CVE-2022-23960
researchers have discovered that there is another way to exploit the Spectre-V2 attacks - Branch History Injection