winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 7:06:59 AM.

Mozilla Firefox ESR (trs)
Mozilla · v140.10.1
361
open
Safari
Apple Inc. · v5.34.57.2
345
open
GPAC
GPAC · v26.02
335
open
Foxit PDF Reader
Foxit Software Inc. · v2025.2.0.33046
310
open
Foxit PDF Reader
Foxit Software Inc. · v2026.1.0.36452
310
open
PDF-XChange Editor
PDF-XChange Co Ltd. · v10.8.5.410
285
open
PDF-XChange Viewer
Tracker Software Products (Canada) Ltd. · v2.5.322.10
285
open
PDF-XChange Standard
Tracker Software Products (Canada) Ltd. · v10.8.2.407
285
open
Foxit PDF Editor (MSI)
Foxit Software Inc. · v2026.1.0.36452
270
open
Foxit PDF Editor
Foxit Software Inc. · v14.0.3.33502
270
open
Foxit PDF Editor
Foxit Software Inc. · v2025.2.0.33046
270
open
JetBrains TeamCity
JetBrains s.r.o. · v2025.11.4
235
open
TeamCityCLI
JetBrains · v0.10.0
235
open
Oracle VirtualBox
Oracle and/or its affiliates · v7.2.8
223
open
Microsoft Edge
Microsoft Corporation · v147.0.3912.98
215
open
Microsoft Edge Canary
Microsoft Corporation · v142.0.3539.0
215
open
Microsoft Edge WebView2 Runtime
Microsoft Corporation · v147.0.3912.98
215
open
Microsoft Edge Dev
Microsoft Corporation · v142.0.3581.0
215
open
Microsoft Edge WebDriver
Microsoft Corporation · v147.0.3912.98
215
open
Microsoft Edge Beta
Microsoft Corporation · v141.0.3537.44
215
open
Vim
Bram Moolenaar et al. · v9.2.0428
208
open
Vim
Bram Moolenaar et al. · v9.2.0437
208
open
ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.21
179
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.21
179
open