CVE-2026-34743 is a buffer overflow in XZ Utils’ lzma_index_append(), a detail that matters because XZ sits deep in the software supply chain and is embedded, directly or indirectly, in far more systems than many administrators realize. Microsoft has now surfaced the issue in its vulnerability...