winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:39:07 AM.

RealPlayer
RealNetworks · v25.0.1
4
open
VX Search Ultimate
Flexense Computing Systems Ltd. · v17.4.16
4
open
SQLcl
Oracle Corporation · v26.1.0.086.1709
4
open
AXIS Device Manager
Axis Communications AB · v5.32.137
4
open
Anaconda3
Anaconda, Inc. · v2025.12-2
4
open
SQL Developer
Oracle Corporation · v24.3.1
4
open
Stelliberty
Stelliberty · v1.2.283
4
open
Chatbox CE
Benn Huang · v0.10.4
4
open
Lenovo Update Retriever
Lenovo · v5.08.03.92
4
open
protobuf
Protocol Buffers · v34.1
4
open
Chatbox
Benn Huang · v1.20.3
4
open
MongoDB Compass
MongoDB Inc · v1.49.5.0
4
open
Gaming Services Repair Tool for PC
Microsoft Corporation · v10.0.26100.6893
4
open
MongoDB Compass Readonly
MongoDB Inc · v1.49.5.0
4
open
Microsoft Xbox Live Developer Tools
Microsoft · v2025.0.2512.22002
4
open
VX Search Server
Flexense Computing Systems Ltd. · v17.4.16
4
open
Advanced SystemCare
IObit · v19.3.0.200
4
open
VX Search
Flexense Computing Systems Ltd. · v17.4.16
4
open
BandiView
Bandisoft.com · v7.26
4
open
Crestron AirMedia Peripherals
Crestron Electronics, Inc. · v1.11.1.164
4
open
Spice agent
The Spice Project · v0.10.0
4
open
LibreCAD
LibreCAD Team · v2.2.1.4
4
open
Avaya Cloud Office for Teams Desktop Plugin
RingCentral · v26.1.20.230
4
open
Cherry Studio
support@cherry-ai.com · v1.9.4
4
open