winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 12:41:51 PM.

Arduino IDE
Arduino SA · v2.3.8
2
open
AWS VPN Client
Amazon · v5.3.4
2
open
Microsoft SQL Server Management Studio 21
Microsoft Corporation · v21.6.17
2
open
Microsoft 365 Agents Playground
Microsoft Corporation · v0.2.24
2
open
FreedroidRPG
The Freedroid Team · v1.0
2
open
RetroArch
Libretro · v1.22.2
2
open
SoftMaker FreeOffice 2024
SoftMaker Software GmbH · v1.0.6170
2
open
XnView MP
Pierre-e Gougelet · v1.11.2.0
2
open
PreMiD
Timeraa · v2.2.0
2
open
WeChat
腾讯科技(深圳)有限公司 · v4.1.9.30
2
open
StepMania 5
StepMania · v5.0.12
2
open
Dell System Update
Dell Inc. · v2.1.2.0
2
open
SoftMaker Office NX
SoftMaker Software GmbH · v24.0.6172
2
open
Anyware PCoIP Client
HP Development Company, L.P. · v26.01.2
2
open
RealVNC Server
RealVNC · v7.17.0.5
2
open
Veracode CLI
Veracode, Inc. · v2.49.0
2
open
Lite XL
Lite XL Team · v2.1.8
2
open
WeChat
腾讯科技(深圳)有限公司 · v3.9.12.57
2
open
innovaphone myApps
innovaphone AG · v15.1.0665
2
open
NoMachine Enterprise Client
NoMachine S.a.r.l. · v9.4.14
2
open
XnView
Gougelet Pierre-e · v2.52.5
2
open
Vovsoft Bulk Barcode Generator
VOVSOFT · v1.1.0.0
2
open
Beyond Compare 5
Scooter Software · v5.2.1.32035
2
open
Copilot modernization agent
GitHub, Inc. · v0.0.293
2
open