Any other hypervisor. QEMU/KVM, Xen, VMWare, and Parallels all have good track records.
This skews the CVE stats significantly since the kernel developers (aka kvm) rarely actually request CVE ids.