winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 7:24:25 AM.

Mozilla Firefox ESR (mk)
Mozilla · v140.12.0
361
open
Mozilla Firefox ESR (gd)
Mozilla · v140.12.0
361
open
Mozilla Firefox ESR (fy-NL)
Mozilla · v140.12.0
361
open
Mozilla Firefox ESR (ia)
Mozilla · v140.12.0
361
open
Mozilla Firefox ESR (rm)
Mozilla · v140.12.0
361
open
GPAC
GPAC · v26.02
356
open
Safari
Apple Inc. · v5.34.57.2
345
open
Foxit PDF Reader
Foxit Software Inc. · v2026.1.1.36485
310
open
Foxit PDF Reader
Foxit Software Inc. · v2025.2.0.33046
310
open
PDF-XChange Editor
PDF-XChange Co Ltd. · v11.0.1.0
285
open
PDF-XChange Viewer
Tracker Software Products (Canada) Ltd. · v2.5.322.10
285
open
PDF-XChange Standard
PDF-XChange Co Ltd. · v11.0.1.0
285
open
Foxit PDF Editor
Foxit Software Inc. · v14.0.3.33502
270
open
Foxit PDF Editor (MSI)
Foxit Software Inc. · v2026.1.1.36485
270
open
Foxit PDF Editor
Foxit Software Inc. · v2025.2.0.33046
270
open
TeamCityCLI
JetBrains · v1.2.0
247
open
JetBrains TeamCity
JetBrains s.r.o. · v2026.1.1
247
open
Oracle VirtualBox
Oracle and/or its affiliates · v7.2.10
233
open
Microsoft Edge
Microsoft Corporation · v149.0.4022.69
222
open
Microsoft Edge WebDriver
Microsoft Corporation · v149.0.4022.69
222
open
Microsoft Edge WebView2 Runtime
Microsoft Corporation · v149.0.4022.69
222
open
Microsoft Edge Dev
Microsoft Corporation · v142.0.3581.0
222
open
Microsoft Edge Canary
Microsoft Corporation · v142.0.3539.0
222
open
Microsoft Edge Beta
Microsoft Corporation · v141.0.3537.44
222
open