Security Patching Steps - VM or VMHost first?

Hi folks, I am just confused when process every month Security Patching on VMs and VMHosts.

For better efficient and security purpose, should I patch VM first? or VMHost first?

after every patching, system reboot required