winget packages with open CVEs
35 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/1/2026, 12:38:21 AM.
Mozilla Firefox (en-US)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (zh-TW)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (zh-CN)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (si)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (sco)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (sr)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (ur)
Mozilla · v150.0.1
1128
open
Mozilla Firefox (trs)
Mozilla · v150.0.1
1128
open
Mozilla Thunderbird ESR (lv)
Mozilla · v140.10.1
731
open
Google Chrome
Google LLC · v147.0.7727.138
1927
open
Microsoft Edge
Microsoft Corporation · v147.0.3912.86
220
open
Visual Studio BuildTools 2022
Microsoft Corporation · v17.14.31
118
open
Microsoft Visual Studio Code
Microsoft Corporation · v1.118.1
49
open
Electron
OpenJS Foundation · v36.9.5
33
open
Microsoft Teams
Microsoft Corporation · v26072.521.4595.7966
19
open
7-Zip
Igor Pavlov · v26.01
13
open
WinRAR
win.rar GmbH · v7.21.0
10
open
SketchUp 2025
Trimble, Inc. · v25.0.660
9
open
Microsoft Power BI Report Server
Microsoft Corporation · v1.25.9558.32914
8
open
Microsoft Azure Service Fabric
Microsoft Corporation · v11.3.475.1
7
open
FileCloud Drive
CodeLathe Technologies Inc · v23.251.0.9130
6
open
Azure Functions Core Tools
Microsoft · v4.10.0
5
open
微信开发者工具
腾讯科技(广州)有限公司 · v2.01.2510290
4
open
Xbox Game Package Manager
Microsoft Corporation · v3.1.7
4
open