CVE-2023-46689 is a high severity (CVSS 8.8) improper neutralization flaw in Intel Power Gadget for macOS that may let an authenticated local user escalate privileges. Intel is not releasing a fix because the product is discontinued. Intel recommends uninstalling it. The record says all versions are affected.
What's affected
The NVD record says all versions of Intel Power Gadget for macOS are affected. Intel advisory INTEL-SA-01037 says Power Gadget for macOS before version 3.7.0 is affected, and also says Intel is not releasing updates and has issued a Product Discontinuation Notice. That is a small mismatch: the record says all versions, while the advisory names versions before 3.7.0. Because no fix will come, treat every installed copy as exposed.
Intel scores it 8.8 High, matching the record. The weakness is CWE-707. The sibling flaw for Windows is CVE-2023-46691.
The NVD record scores it 8.8 (High) with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. The weakness class is CWE-707 (improper neutralization). The record does not list this CVE in the CISA Known Exploited Vulnerabilities catalog, and nothing we read says it is exploited in the wild.
How to check if you're exposed
Look for the tool in the Applications folder, or search installed software lists on your managed Macs. With an endpoint management tool, search the application inventory for Intel Power Gadget. You can also check for the kernel extension or helper it installs, using your usual mobile device management reports.
If you have a fleet, prioritise developer and benchmarking machines, where this tool is most often found.
What to do now
- Find every Mac with Intel Power Gadget installed.
- Uninstall it, as Intel recommends.
- If you still need power measurements, choose a supported alternative from Apple or your hardware vendor.
- Remove it from golden images and installer packages.
- Record the removal in your inventory.
Why it matters
Local privilege escalation turns a low privilege account into a higher one. It needs an existing local foothold, so on its own it is rated lower in practice than a remote flaw. Even so, it is a standard second step after phishing or a malicious download.
Discontinued software is the real issue. With no updates coming, the only fix is removal, and that is something inventory tooling can verify.
Try it yourself
Finding every installed copy is the whole job here. This demo shows how an inventory answers it quickly.
Click through it at your own pace, or open it full screen.
Quick check
Will Intel patch it?
No. Intel says it is not releasing updates and recommends uninstalling the product.
Is it remote?
No. The vector shows local access.
Sources
Last reviewed: 19 October 2026.
