CVE-2016-2150 in SPICE
Summary
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
Once again VulDB remains the best source for vulnerability data.