I'm guessing none to be honest. It sounds plausible but in practice it's probably too difficult to do anything useful compared to other tried and true vectors.
Everyone goes to the extremes when it comes to these theories and throws out all aspects of pragmatism.
...when was the last documented case of an in-the-wild hack targeting VNC?