https://en.wikipedia.org/wiki/Virtual_machine_escape
Not true. There's way more than that list. I could immediately think of 2 more from last year: CVE-2025-22224 and CVE-2025-22225