An extremely serious vulnerability in Xen hypervisor software that would have allowed an attacker to escape their virtual machine and take over a host computer went undiscovered for seven years.