winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 12:42:35 AM.

Microsoft ASP.NET Core Runtime 3.1
Microsoft Corporation · v3.1.32
20
open
Microsoft .NET Core SDK 3.0.103 (x64)
Microsoft Corporation · v3.0.103.14459
20
open
Microsoft ASP.NET Core Runtime 7.0
Microsoft Corporation · v7.0.20
20
open
Microsoft ASP.NET Core Runtime 8.0
Microsoft Corporation · v8.0.26
20
open
Microsoft ASP.NET Core Hosting Bundle 6.0
Microsoft Corporation · v6.0.36
20
open
Microsoft .NET Core SDK 2.2.207 (x64)
Microsoft Corporation · v2.2.207
20
open
Microsoft ASP.NET Core Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-preview.3.26207.106
20
open
Microsoft ASP.NET Core Runtime 10.0
Microsoft Corporation · v10.0.7
20
open
Microsoft ASP.NET Core Hosting Bundle 8.0
Microsoft Corporation · v8.0.26
20
open
Microsoft ASP.NET Core Runtime 9.0
Microsoft Corporation · v9.0.15
20
open
Microsoft ASP.NET Core Runtime 6.0
Microsoft Corporation · v6.0.36
20
open
GLab
GitLab · v1.93.0
1031
open
MySQL
Oracle Corporation · v8.4.8
519
open
Microsoft Office 2010 Filter Packs
Microsoft Corporation · v14.0.4730.1010
436
open
Adobe Acrobat Pro
Adobe · v26.001.21431
396
open
Adobe Acrobat 2020
Adobe · v20.001.30002
396
open
Adobe Acrobat Reader (64-bit)
Adobe · v26.001.21529
392
open
Adobe Acrobat Reader (32-bit)
Adobe Systems Incorporated · v26.001.21431
392
open
Mozilla Firefox ESR (af)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (pl)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (ar)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (lv)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (sr)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (uz)
Mozilla · v140.10.1
361
open