Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
- Vendor
- Trend Micro
- Product
- Apex One and Worry-Free Business Security
- CVSS
- 7.2
- EPSS (exploit probability)
- 4.3%
- Status
- kev
- CISA patch-by (BOD 22-01)
- Added to KEV
Is CVE-2023-41179 being exploited?
Yes. CISA added CVE-2023-41179 to its Known Exploited Vulnerabilities catalog on . CISA only lists a CVE when it has reliable evidence of exploitation in the wild.
FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 4.3% (scored October 14, 2026).
- CISA KEV[ LISTED ]
- ENISA EUVD (exploited)[ — ]
- CIRCL KEV[ — ]
Catalog snapshot 2026-10-24. Full cross-catalog view: /kev-comparison
CVE-2023-41179 timeline
Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON
What to do
CISA required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
US federal civilian agencies must remediate by (21 days after listing) under BOD 22-01. Everyone else: that deadline is a sensible upper bound, not a target. Vendor guidance and the NVD record are linked under Source above.
Other Trend Micro CVEs we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV |
|---|---|---|---|---|
| CVE-2026-34926 Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability | [ MEDIUM ] | 6.7 | 0.5% | |
| CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability | [ CRITICAL ] | 9.4 | 23.9% | |
| CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability | [ HIGH ] | 7.2 | 3.3% | |
| CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability | [ CRITICAL ] | 9.8 | 19.5% | |
| CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability | [ HIGH ] | 7.8 | 1.5% | |
| CVE-2021-36741 Trend Micro Multiple Products Improper Input Validation Vulnerability | [ HIGH ] | 8.8 | 5.0% | |
| CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | [ CRITICAL ] | 9.8 | 11.9% | |
| CVE-2020-8468 Trend Micro Multiple Products Content Validation Escape Vulnerability | [ HIGH ] | 8.8 | 6.2% |