CVE-2026-35500 is a stack-based buffer overflow vulnerability in the UEFI firmware of the Intel Slim Bootloader within Ring 0: Bare Metal OS. It may allow an unauthenticated attacker with physical access and special internal knowledge to escalate privileges without user interaction. The vulnerability impacts system confidentiality, integrity, and availability at a high level.