Wingetlywingetly
← All apps
W

Wasmtime

by Bytecode Alliancev48.0.2

Last updated

A fast and secure runtime for WebAssembly

Visit homepage

Install with winget

$ winget install --id BytecodeAlliance.Wasmtime.Portable --exact --version 48.0.2

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Wasmtime is a Bytecode Alliance project that is a standalone wasm-only optimizing runtime for WebAssembly and WASI. It runs WebAssembly code outside of the Web, and can be used both as a command-line utility or as a library embedded in a larger application.

Installers · v48.0.2

ArchitectureTypeScopeInstallDownload
x64ZIP
archive
-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium5.0Patched in wingetCVE-2026-54786affects before 24.0.10, 36.0.11, 44.0.3, 45.0.2Jul 1, 2026

    Wasmtime is a runtime for WebAssembly. All versions prior to 24.0.10; versions 25.0.0 through those before 36.0.11; versions 37.0.0 through those before 44.0.3; and versions 45.0.0 and 45.0.1 contain a native implementation of WASIp1 which suffers from a leak in the fd_renumber...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-47261affects before 24.0.9, 36.0.10, 44.0.2Jun 15, 2026

    Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all() and FilePerms::READ without FilePerms::WRITE, this access control mechanism can be bypassed via the wasip2 descriptor.open-at or wasip1 pat...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-44216affects before 36.0.8, 43.0.2May 14, 2026

    Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus panic, when a table with an extremely lar...

    Vendor advisory
  • medium5.4Patched in wingetCVE-2026-35195affects before 24.0.7, 36.0.7, 42.0.2Apr 9, 2026

    Wasmtime is a runtime for WebAssembly. Prior to 24.0.7, 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of transcoding strings between components contains a bug where the return value of a guest component's realloc is not validated before the host attempts to write through...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-35186affects before 36.0.7, 42.0.2Apr 9, 2026

    Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's Winch compiler backend contains a bug where translating the table.grow operator causes the result to be incorrectly typed. For 32-bit tables this means that the result of the oper...

    Vendor advisory
  • medium6.3Patched in wingetCVE-2026-34988affects before 36.0.7, 42.0.2Apr 9, 2026

    Wasmtime is a runtime for WebAssembly. From 28.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime's implementation of its pooling allocator contains a bug where in certain configurations the contents of linear memory can be leaked from one instance to the next. The implementatio...

    Vendor advisory
  • critical9.9Patched in wingetCVE-2026-34987affects before 36.0.7, 42.0.2Apr 9, 2026

    Wasmtime is a runtime for WebAssembly. From 25.0.0 to before 36.0.7, 42.0.2, and 43.0.1, Wasmtime with its Winch (baseline) non-default compiler backend may allow properly constructed guest Wasm to access host memory outside of its linear-memory sandbox. This vulnerability requi...

    Vendor advisory
  • medium5.0Patched in wingetCVE-2026-34983affects v43.0.0Apr 9, 2026

    Wasmtime is a runtime for WebAssembly. In 43.0.0, cloning a wasmtime::Linker is unsound and can result in use-after-free bugs. This bug is not controllable by guest Wasm programs. It can only be triggered by a specific sequence of embedder API calls made by the host. Specificall...

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 6h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • Node.js (LTS)Node.js Foundation
    OpenJS.NodeJS.LTSv24.19.0

    Run JavaScript Everywhere

  • Microsoft .NET Windows Desktop Runtime 10.0Microsoft Corporation
    Microsoft.DotNet.DesktopRuntime.10v10.0.12

    .NET is a free, cross-platform, open-source developer platform for building many different types of applications.

  • Microsoft .NET Windows Desktop Runtime 8.0Microsoft Corporation
    Microsoft.DotNet.DesktopRuntime.8v8.0.31

    .NET is a free, cross-platform, open-source developer platform for building many different types of applications.

  • R
    RipGrep MSVCBurntSushi
    BurntSushi.ripgrep.MSVCv15.2.0

    ripgrep recursively searches directories for a regex pattern while respecting your gitignore

  • Microsoft .NET Windows Desktop Runtime 6.0Microsoft Corporation
    Microsoft.DotNet.DesktopRuntime.6v6.0.36

    .NET is a free, cross-platform, open-source developer platform for building many different types of applications.

  • Microsoft ASP.NET Core Runtime 9.0Microsoft Corporation
    Microsoft.DotNet.AspNetCore.9v9.0.20

    .NET is a free, cross-platform, open-source developer platform for building many different types of applications.

More from Bytecode Alliance or browse aot, cranelift, jit.

Frequently asked questions

How do I install Wasmtime on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id BytecodeAlliance.Wasmtime.Portable --exact --version 48.0.2. winget downloads the installer from Bytecode Alliance and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Wasmtime silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id BytecodeAlliance.Wasmtime.Portable --exact 48.0.2 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
How do I uninstall Wasmtime via winget?
Run: winget uninstall --id BytecodeAlliance.Wasmtime.Portable --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Wasmtime's Apps & Features entry.
Is Wasmtime free?
Wasmtime is distributed under Apache-2.0. Refer to the publisher (https://wasmtime.dev/) for the full license terms - Wingetly itself does not charge for installation.
Does Wasmtime work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Wasmtime directly from the publisher.
How do I keep Wasmtime up to date?
Run winget upgrade --id BytecodeAlliance.Wasmtime.Portable --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Wasmtime from microsoft/winget-pkgs.

Recent versions

  • 48.0.2latest
  • 48.0.1
  • 48.0.0
  • 47.0.3
  • 47.0.0
  • 46.0.1
  • 46.0.0
  • 45.0.2
  • 45.0.1
  • 45.0.0