Watch this video on YouTube
What distinguishes a "host escape" from a "guest escape" in virtualization security?