Trend Micro Addresses Zero-Day Flaws Exploited in the Wild

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A critical zero-day vulnerability, tracked as CVE-2023-41179, has been identified in the third-party AV uninstaller module contained in Trend Micro Apex One, Worry-Free Business Security, and...

CVE-2023-41179

creationtimestamp| type| source ---|---|--- 2023-09-19 15:22:39+00:00| exploited| https://t.me/informationsecuritychannel/50671 2023-09-19 18:29:32+00:00| seen| https://t.me/cibsecurity/70731 2023-09-20 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1114 2023-09-20...

CVE-2023-41179

CVE-2023-41179 affects Trend Micro Apex One (on‑prem and SaaS) and Worry‑Free Business Security products, via a vulnerability in the third‑party AV uninstaller module that could allow arbitrary code execution. An attacker must have administrative console access to exploit the issue, and the vulne...

VulnCheck KEV: CVE-2023-41179

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target...