Microsoft spotted and reported to Broadcom all three bugs, which can be chained together to escape a guest virtual machine and gain full control of the hypervisor and host system, which would be bad.