winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 12:41:00 PM.

Visual Studio Community 2026
Microsoft Corporation · v18.7.1
118
open
Visual Studio Professional 2022
Microsoft Corporation · v17.14.35
118
open
Visual Studio Enterprise 2026 Insiders
Microsoft Corporation · v18.8.11912.234
118
open
Visual Studio Enterprise 2022
Microsoft Corporation · v17.14.35
118
open
Visual Studio Enterprise 2026
Microsoft Corporation · v18.7.0
118
open
Visual Studio Remote Debugger for Devices
Microsoft Corporation · v18.7.0
118
open
Visual Studio Community 2026 Insiders
Microsoft Corporation · v18.8.11912.234
118
open
Remote Tools for Visual Studio 2022
Microsoft Corporation · v17.14.8
118
open
Visual Studio 2022 Remote Debugger for Devices
Microsoft Corporation · v17.14.6
118
open
Visual Studio Professional 2026 Insiders
Microsoft Corporation · v11218.7
118
open
Ivanti Package Studio
Ivanti · v3.8.1
114
open
Microsoft Visual Studio Community 2019
Microsoft Corporation · v16.11.37301.9
107
open
Visual Studio BuildTools 2019
Microsoft Corporation · v16.11.57
107
open
Visual Studio Professional 2019
Microsoft Corporation · v16.11.57
107
open
Visual Studio Enterprise 2019
Microsoft Corporation · v16.11.57
107
open
Open CoreUI
xxnuo · v0.9.6
106
open
Open CoreUI Desktop
github · v0.9.6
106
open
ACS
Splunk · v2.23.0
106
open
Open WebUI
Open WebUI Inc. · v0.0.20
106
open
Microsoft SQL Server 2022 Express
Microsoft Corporation · v16.0.1000.6
105
open
Microsoft SQL Server 2022 Developer
Microsoft Corporation · v16.0.1000.6
105
open
Apple Mobile Device Support
Apple Inc. · v19.4.0.10
104
open
ColorAnt
ColorLogic · v11.1.0
104
open
iTunes
Apple Inc. · v12.13.10.3
104
open