Your last question is really, really interesting. The answer is yes in at least one case (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0923 https://c

Your last question is really, really interesting. The answer is yes in at least one case (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0923 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0923), but I'm not aware of any real in-the-wild behavior of this sort (that is, not just basically a PoC of that vuln). Note that that vuln is related to shared directories - anyone using a VM for isolation should probably not use these. I recently heard an amusing story of another infosec professional that cryptowalled their Macbook by testing on a VM with over-generous folder shares. Of course this is an extreme example caused by a clear mistake, but it's food for thought.