Unverified50% confidenceFactExact time

2015年的VENOM漏洞中，攻击者通过虚拟软盘控制器的缓冲区溢出实现了完整的VM逃逸

1

Sources

50%

Confidence

Long-term

Relevance

7/11/2026

First Seen

Sources

Google's $250K Bounty: Linux VM Escape Vulnerability Sets a Historic Record

redditr/programming7/9/2026

Related Claims

Unverified2015年曝光的VENOM漏洞（CVE-2015-3456）通过向QEMU模拟的虚拟软盘控制器发送特制I/O命令触发堆溢出，实现从Guest到Host的完整VM逃逸82% similar Unverified虚拟机逃逸是指攻击者从受控的客户机内部突破隔离屏障，获得对宿主机或同物理主机上其他VM的访问权限79% similar Unverified2017年Pwn2Own大赛中选手通过链式漏洞逃出VMware虚拟机72% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/477360

API

curl https://kongchang.com/api/v1/knowledge/claims/477360

MCP

get_claim(id=477360)