winget packages with open CVEs
107 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/1/2026, 12:38:21 AM.
Mozilla Thunderbird ESR (es-AR)
Mozilla · v140.10.1
731
open
Mozilla Thunderbird ESR (pt-BR)
Mozilla · v140.10.1
731
open
Mozilla Thunderbird ESR (sq)
Mozilla · v140.10.1
731
open
Mozilla Thunderbird (hy-AM)
Mozilla · v150.0.1
731
open
Mozilla Thunderbird (lt)
Mozilla · v150.0.1
731
open
Mozilla Thunderbird ESR (pt-PT)
Mozilla · v140.10.1
731
open
Mozilla Thunderbird ESR (sl)
Mozilla · v140.10.1
731
open
Mozilla Thunderbird ESR (ro)
Mozilla · v140.10.1
731
open
Google Chrome
Google LLC · v147.0.7727.138
1927
open
Mozilla Firefox ESR (sr)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (af)
Mozilla · v140.10.1
361
open
Mozilla Firefox ESR (lv)
Mozilla · v140.10.1
361
open
Foxit PDF Reader
Foxit Software Inc. · v2025.2.0.33046
310
open
Microsoft Edge
Microsoft Corporation · v147.0.3912.86
220
open
Liberica JRE 15
BellSoft · v15.0.2+10
153
open
Visual Studio BuildTools 2022
Microsoft Corporation · v17.14.31
118
open
Visual Studio Community 2022
Microsoft Corporation · v17.14.31
118
open
Liberica JDK 21 Lite
BellSoft · v21.0.10.10
86
open
Eclipse Temurin JDK with Hotspot 19
Eclipse Adoptium · v19.0.2.7
86
open
Liberica JDK 22
BellSoft · v22.0.2.11
86
open
Microsoft Visual Studio Code
Microsoft Corporation · v1.118.1
49
open
Electron
OpenJS Foundation · v36.9.5
33
open
Electron
OpenJS Foundation · v40.9.2
33
open
coreutils
uutils · v0.8.0
26
open