winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/3/2026, 6:21:32 PM.

Mozilla Thunderbird (kk)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (bg)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (it)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (ca)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (ro)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (cs)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (ar)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (nb-NO)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (dsb)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird (de)
Mozilla · v150.0.1
736
open
Mozilla Thunderbird ESR (ja)
Mozilla · v140.10.1
736
open
Mozilla Thunderbird (et)
Mozilla · v150.0.1
736
open
Google Chrome
Google LLC · v147.0.7727.138
1950
open
Google Chrome Beta (EXE)
Google LLC · v148.0.7778.96
1950
open
Google Chrome Dev (EXE)
Google LLC · v149.0.7815.2
1950
open
Google Chrome (EXE)
Google LLC · v147.0.7727.138
1950
open
Google Chrome Dev
Google LLC · v149.0.7815.2
1950
open
Google Chrome Canary
Google LLC · v149.0.7823.0
1950
open
Google Chrome Beta
Google LLC · v148.0.7778.96
1950
open
Adobe Connect
Adobe · v21.11.22
53
open
Adobe Connect application MSI
Adobe · v26.3.125
53
open
Adobe Connect
Adobe Systems Inc. · v2026.3.125
53
open
ClawWork
clawwork-ai · v0.0.14
406
open
ClawPanel
openclaw · v0.14.0
406
open