winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/4/2026, 12:38:28 PM.

Visual Studio Professional 2026 Insiders
Microsoft Corporation · v11218.7
118
open
Visual Studio Enterprise 2026
Microsoft Corporation · v18.5.2
118
open
Remote Tools for Visual Studio 2022
Microsoft Corporation · v17.14.8
118
open
Visual Studio Professional 2026
Microsoft Corporation · v18.5.2
118
open
Visual Studio Community 2026
Microsoft Corporation · v18.5.2
118
open
Ivanti Package Studio
Ivanti · v3.8.1
111
open
Visual Studio Professional 2019
Microsoft Corporation · v16.11.55
107
open
Microsoft Visual Studio Community 2019
Microsoft Corporation · v16.11.53
107
open
Visual Studio Enterprise 2019
Microsoft Corporation · v16.11.55
107
open
Visual Studio BuildTools 2019
Microsoft Corporation · v16.11.55
107
open
Microsoft SQL Server 2022 Express
Microsoft Corporation · v16.0.1000.6
105
open
Microsoft SQL Server 2022 Developer
Microsoft Corporation · v16.0.1000.6
105
open
iTunes
Apple Inc. · v12.13.10.3
104
open
ColorAnt
ColorLogic · v11.1.0
104
open
Apple Mobile Device Support
Apple Inc. · v19.4.0.10
104
open
Zoom Rooms
Zoom Video Communications, Inc. · v7.0.0
104
open
Bento4
Axiomatic Systems, LLC. · v1.6.0-641
103
open
iCloud (Legacy)
Apple Inc. · v7.21.0.23
97
open
ACS
Splunk · v2.22.0
96
open
Microsoft SQL Server 2017 Express
Microsoft Corporation · v14.0.1000.169
92
open
Microsoft SQL Server 2017 Developer
Microsoft Corporation · v14.0.1000.169
92
open
JetBrains YouTrack
JetBrains · v23.1.16998
90
open
Eclipse Temurin JDK with Hotspot 17
Eclipse Adoptium · v17.0.18.8
86
open
Eclipse Temurin JDK with Hotspot 19
Eclipse Adoptium · v19.0.2.7
86
open