winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 6/20/2026, 12:41:00 PM.
Zoom Rooms
Zoom Video Communications, Inc. · v7.0.5
104
open
Bento4
Axiomatic Systems, LLC. · v1.6.0-641
103
open
Devolutions Server Console
Devolutions inc. · v2026.2.5.0
101
open
iCloud (Legacy)
Apple Inc. · v7.21.0.23
97
open
JetBrains YouTrack
JetBrains · v23.1.16998
95
open
Microsoft SQL Server 2017 Express
Microsoft Corporation · v14.0.1000.169
92
open
Microsoft SQL Server 2017 Developer
Microsoft Corporation · v14.0.1000.169
92
open
Eclipse Temurin JDK with Hotspot 17
Eclipse Adoptium · v17.0.19.10
86
open
Eclipse Temurin JDK with Hotspot 8
Eclipse Adoptium · v8.0.492.9
86
open
Microsoft Build of OpenJDK with Hotspot 17
Microsoft · v17.0.19.10
86
open
Eclipse Temurin JDK with Hotspot 21
Eclipse Adoptium · v21.0.11.10
86
open
Eclipse Temurin JDK with Hotspot 25
Eclipse Adoptium · v25.0.3.9
86
open
Microsoft Build of OpenJDK with Hotspot 25
Microsoft · v25.0.3.9
86
open
Microsoft Build of OpenJDK with Hotspot 21
Microsoft · v21.0.11.10
86
open
AdoptOpenJDK JDK with Hotspot 17
AdoptOpenJDK · v17.0.0.20
86
open
Eclipse Temurin JDK with Hotspot 11
Eclipse Adoptium · v11.0.31.11
86
open
AdoptOpenJDK JDK with Hotspot 8
AdoptOpenJDK · v8.0.292.10
86
open
Eclipse Temurin JDK with Hotspot 16
Eclipse Adoptium · v16.0.2.7
86
open
Liberica JDK 22 Lite
BellSoft · v22.0.2.11
86
open
SapMachine 25 JDK
SapMachine Team · v25.0.3
86
open
SapMachine 26 JDK
SapMachine Team · v26.0.1
86
open
Liberica JDK 22
BellSoft · v22.0.2.11
86
open
Microsoft Build of OpenJDK with Hotspot 11
Microsoft · v11.0.31.11
86
open
Liberica JDK 8 Full
BellSoft · v8.0.492.9
86
open