https://pwn.watch/t/trend-micro Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Mon, 18 Aug 2025 00:00:00 GMT https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948 https://pwn.watch/i/trend-micro-apex-one-cve-2025-54948 Mon, 18 Aug 2025 00:00:00 GMT critical <p>Trend Micro Apex One Management Console (on-premise) contains an OS command injection vulnerability that could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. Added to CISA KEV on 2025-08-18.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-08-18: CISA added CVE-2025-54948 to the KEV catalog (due 2025-09-08).</li></ul> <p><strong>CVEs:</strong> CVE-2025-54948</p> https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179 https://pwn.watch/i/trend-micro-apex-one-and-worry-free-business-cve-2023-41179 Thu, 21 Sep 2023 00:00:00 GMT high <p>Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability. Added to CISA KEV on 2023-09-21.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2023-09-21: CISA added CVE-2023-41179 to the KEV catalog (due 2023-10-12).</li></ul> <p><strong>CVEs:</strong> CVE-2023-41179</p>