---
id: "CVE-2023-41179"
kind: "vulnerability"
aliases: ["CVE-2023-41179"]
title: "A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS),\u2026"
severity: "high"
cvss: 7.2
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Trend Micro Apex One and Worry-Free Business Security", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "trendmicro apex one", "fixed": [], "affected": "= 2019", "ecosystem": "vendor"}, {"name": "trendmicro worry-free business security", "fixed": [], "affected": "= 10.0", "ecosystem": "vendor"}, {"name": "trendmicro worry-free business security services", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apex-one", "exploited", "trend-micro", "vendor", "windows", "worry-free-business-security"]
not_affected_if: ["no-admin-console-exposure"]
published_at: "2023-09-19T14:15:21+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41179", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS),…

Trend Micro Apex One and Worry-Free Business Security have an unspecified flaw in their third-party anti-virus uninstaller module. An attacker with administrative console access can manipulate that module to run code remotely.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Trend Micro Apex One and Worry-Free Business Security affected ? fixed ?
- vendor:trendmicro apex one affected = 2019 fixed ?
- vendor:trendmicro worry-free business security affected = 10.0 fixed ?
- vendor:trendmicro worry-free business security services affected ? fixed ?

## Fix

Apply the mitigations from the Trend Micro advisory, or discontinue use of the product if no mitigation is available (per CISA KEV required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41179
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-41179

## From the sources

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_