CVE-2023-41231 is a medium severity (CVSS 6.7) flaw in Intel ACAT, the Assistive Context-Aware Toolkit. Incorrect default permissions in versions before 2.0.0 may let an authenticated local user escalate privileges. The fix is to move to ACAT 2.0.0 or later and confirm the details in Intel advisory INTEL-SA-00913.
What's affected
Intel ACAT (Assistive Context-Aware Toolkit) is the affected product. The NVD record says "some ACAT software maintained by Intel" before version 2.0.0 is affected, so 2.0.0 is the first version outside the range. The record gives no more detail about which components or install types are involved.
The Intel advisory (INTEL-SA-00913) is the authoritative list. Intel's site refused our automated request, so we could not read it and cannot confirm anything beyond what the record says.
The record scores the flaw 6.7 (Medium) with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. It can be reached with local access to the machine, the attack complexity is high, it requires low privileges, and it needs a user to take part (for example by opening or visiting something). The impact on confidentiality is high, on integrity high and on availability high. The weakness class is CWE-276 (incorrect default permissions). The record does not mark this CVE as being in the CISA Known Exploited Vulnerabilities catalog, and nothing we read says it is exploited in the wild.
How to check if you're exposed
ACAT is desktop software, so there is no package manager query that fits every install. Open the application and look at its version in the About dialog, or check the installed programs list on the machine. Any version before 2.0.0 is in scope.
On shared or kiosk machines, also look at who holds local accounts. The flaw needs an authenticated local user, so the machines that matter most are the ones where several people can sign in.
What to do now
- Inventory the machines that run ACAT and note the version on each.
- Install ACAT 2.0.0 or later, and read Intel advisory INTEL-SA-00913 for any extra steps.
- Review local accounts on affected machines and remove those that are not needed.
- Re-check permissions on the ACAT install folder after the upgrade, as the weakness is about default permissions.
Why it matters
The weakness is CWE-276: software installs files or settings with permissions that are too open. A low privileged user can then change something a higher privileged process trusts. The record scores it with high attack complexity and a required user action, which is why it lands at medium rather than high.
Local privilege escalation flaws rarely start an incident alone. They matter after an attacker or a malicious insider already has a foothold, because they turn a limited account into a powerful one. Patching them keeps a small problem small.
Quick check
Is CVE-2023-41231 remotely exploitable?
No. The vector marks the attack path as local, so the attacker needs an account on the machine. The record does not say it is exploited in the wild.
Which version fixes it?
The record says versions before 2.0.0 are affected, so ACAT 2.0.0 or later. Confirm in Intel advisory INTEL-SA-00913.
Sources
- Intel advisory INTEL-SA-00913 (linked from the NVD record; access was refused when we reviewed it)
- CVE-2023-41231 on Gold
Last reviewed: 19 October 2026.
