Windows VM - even as hypervisor 1 - could leak any data. You need a revisited OS and kernel to be safe.
Edit: Once you accessed your network your firmware could possibly track everything as well. But nobody knows. Once I heard that the intel firmware has more LoC then the linux kernel (which is the most collaborated human project ever in existence).