CVE-2026-41224 is an out-of-bounds write vulnerability in the UEFI firmware of the Intel Slim Bootloader running in Ring 0: Bare Metal OS. This flaw may allow an unauthenticated attacker with physical access and low attack complexity to escalate privileges. The vulnerability impacts system confidentiality, integrity, and availability at a high level.