winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/3/2026, 12:21:00 PM.

Mozilla Thunderbird (hy-AM)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird ESR (es-AR)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (sl)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (he)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (en-CA)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (pt-BR)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (lv)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird (lt)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird ESR (ro)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird (sq)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (fr)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (MSIX)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (sv-SE)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird ESR (sv-SE)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird (fi)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (nn-NO)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (vi)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (fy-NL)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (pt-PT)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (af)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird ESR (hsb)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (da)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (rm)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird ESR (de)
Mozilla · v140.10.1
736
open