winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 6:34:35 PM.

JetBrains Toolbox
JetBrains · v3.4.3.0
9
open
Azure Monitor Agent
Microsoft Corporation · v1.41.0.0
9
open
WPS Office
Kingsoft Corp. · v12.1.0.25865
9
open
SketchUp Pro 2022
Trimble, Inc. · v22.0.354
9
open
LLVM MinGW (UCRT runtime)
Martin Storsjö · v22.1.4-20260421
8
open
Microsoft Power BI Report Server
Microsoft Corporation · v1.25.9558.32914
8
open
Windows Admin Center (v2)
Microsoft Corporation · v2.6.6.18
8
open
LLVM MinGW (MSVCRT runtime)
Martin Storsjö · v22.1.4-20260421
8
open
AKS desktop
Microsoft · v0.1.0-alpha
8
open
Philips SpeechLive (MSI)
Philips SpeechLive · v3.8.3.0
8
open
Yandex Browser
Yandex · v25.12.5.693
8
open
3CX
3CX Software DMCC · v20.0.1102.0
8
open
Webex Recorder and Player
Cisco Webex LLC · v45.6.4.8
8
open
Intel(R) Extreme Tuning Utility
Intel Corporation · v7.14.2.69
8
open
Geode CLI
GeodeSDK · v3.7.4
8
open
Razer Synapse 3
Razer Inc. · v1.22.0.737
8
open
Intel Endpoint Management Assistant
Intel · v1.14.5.0
8
open
LLVM
LLVM · v22.1.4
8
open
ClangFormat
LLVM · v19.1.7
8
open
Umbrella Roaming Client
Cisco · v3.0.466
8
open
Network Recording Player
Cisco Webex LLC · v41.5.7.11
8
open
Razer Synapse 4
Razer Inc. · v2.4.0.868
8
open
3CX
3CX · v1.0.33
8
open
LiquidFiles OutlookPlugin
LiquidFiles · v3.0.51
8
open