winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 5/6/2026, 6:37:38 PM.

Windows Software Development Kit
Microsoft Corporation · v10.0.19041.685
2
open
ODADrawingsExplorer
ODA · v27.1.0
2
open
RealVNC Viewer
RealVNC · v7.15.1.18
2
open
DualSafe Password Manager
iTop Inc. · v1.4.0.14
2
open
MediaInfo-CLI
MediaArea.net · v26.01
2
open
SWIG
SWIG · v4.4.1
2
open
Caret Beta
caret.io · v4.0.0-rc23
2
open
IBM Semeru Runtime Open Edition (JDK) 17
Semeru · v17.0.18.8
2
open
IBM Semeru Runtime Open Edition (JRE) 8
Semeru · v8.0.482.8
2
open
PDQ Inventory
PDQ.com · v20.0.5.0
2
open
Wondershare PDFelement
Wondershare · v12.1.17
1
open
Claude
Anthropic, PBC · v1.6259.1
1
open
Tesseract-OCR - open source OCR engine
Tesseract-OCR community · v5.4.0.20240606
1
open
Sysinternals Suite
Sysinternals · v2026-04-09
1
open
iFun Screen Recorder
IObit · v1.2.0.261
1
open
Autodesk Desktop App
Autodesk · v8.4.0.50
1
open
EMCO MSI Package Builder 12
EMCO Software · v12.1.1
1
open
Thorium
EDRLab · v3.4.0
1
open
DataSpell
JetBrains s.r.o. · v2026.1.1
1
open
EMCO Ping Monitor
EMCO Software · v9.2.1.6517
1
open
DataSpell (EAP)
JetBrains s.r.o. · v261.21849.35
1
open
QQ小程序开发者工具
Tencent · v0.72.2502070.19
1
open
Wondershare UniConverter 16
Wondershare Software · v16.7.0.368
1
open
jaeger
jaegertracing · v2.17.0
1
open