CVE-2023-41179
CISA KEVPublished September 21, 2023 · Updated April 3, 2026
high
Official Description+
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Affected Products
| Vendor | Product |
|---|---|
| Trend Micro | Apex One and Worry-Free Business Security |
Patch Status
Patch by 2023-10-12
Recommended Actions
- Check if your systems use any of the affected products listed above.
- Apply vendor patches immediately if available.
- This vulnerability is in CISA's Known Exploited Vulnerabilities catalog — prioritize remediation.
- Monitor vendor advisories for updates and additional mitigations.
- Review logs for indicators of compromise related to CVE-2023-41179.