Venom (2015)
CrowdStrike researcher Jason Geffner found a buffer overflow in QEMU's virtual floppy disk controller. A guest could overflow the buffer and escape to the host, affecting major cloud providers including Amazon Web Services and others using the default floppy driver.
Cloud providers raced to patch or disable the vulnerable controller; the bug never saw widespread exploitation.
Established VM escape as a known risk for shared cloud infrastructure and pushed providers to harden hypervisor defaults.
Like PwnEscape, Venom let a guest break isolation and reach the host — only through emulated hardware rather than the kernel network stack.
