winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/5/2026, 6:34:35 PM.

Philips SpeechLive
Philips SpeechLive · v3.8.3
8
open
LiquidFiles CLI
LiquidFiles Pty Ltd. · v4.0.0
8
open
Razer Synapse 4
Razer Inc. · v2.4.0.868
8
open
SonicWall NetExtender
SonicWall Inc. · v10.3.4
8
open
Geode CLI
GeodeSDK · v3.7.4
8
open
Intel(R) Extreme Tuning Utility
Intel Corporation · v7.14.2.69
8
open
Cisco Webex Network Recording Converter
Cisco Webex LLC · v45.6.4.8
8
open
3CX
3CX Software DMCC · v20.0.1102.0
8
open
Intel Endpoint Management Assistant
Intel · v1.14.5.0
8
open
3CX
3CX · v1.0.33
8
open
Microsoft Azure Service Fabric
Microsoft Corporation · v11.3.475.1
7
open
Sandboxie
sandboxie-plus.com · v5.72.5
7
open
PowerShell Universal Desktop
Ironman Software, LLC · v4.0.12
7
open
PresentMon Console
Intel Corporation · v2.4.1.0
7
open
PyCharm Professional Edition
JetBrains s.r.o. · v2024.3.5
7
open
Splashtop Streamer Deployment
Splashtop Inc. · v3.8.2.0
7
open
pretixSCAN
rami.io GmbH · v1.23.0
7
open
JetBrains dotUltimate
JetBrains s.r.o. · v2026.1.1
7
open
Microsoft OneDrive
Microsoft Corporation · v26.063.0405.0002
7
open
yt-dlp-nightly
yt-dlp · v2026.05.03.233852
7
open
Intel oneAPI MKL
Intel Corporation · v2025.3.1
7
open
Splashtop Streamer
Splashtop Inc. · v3.8.2.0
7
open
HalalDL
Asdmir786 · v0.4.1
7
open
JetBrains Rider
JetBrains s.r.o. · v2026.1.1
7
open