Significant Xen Hypervisor Exploit Advisory (theregister.co.uk)

While difficult to exploit, the advisory itself paints quite an interesting picture of what could be possible by exploiting the bug: https://xenbits.xen.org/xsa/advisory-195.html