Trend Micro has released an emergency hotfix to patch an actively exploited critical remote code execution (RCE) vulnerability in their Apex One and Worry-Free Business Security solutions for Windows. Apex One is an enterprise endpoint protection solution for large businesses, and the Worry-Free Business Security suite is tiered for small and medium businesses. The flaw, tracked as CVE-2023-41179, exists in a third-party antivirus uninstaller module that is bundled along with the Apex One and Worry-Free Business Security software. An attacker that has gained administrative access to the console could exploit this flaw by manipulating the module to run arbitrary code on the vulnerable instance. At this time, Trend Mico has stated that it has “observed at least one active attempt of potential exploitation of this vulnerability in the wild.” CTIX analysts recommend that any administrators responsible for these solutions ensure they are running the most recent versions to prevent future exploitation. If the patches cannot immediately be implemented due to the negative effect it would have on critical business processes, Trend Mico suggests limiting access to the administrative console.