winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 10/11/2026, 6:18:38 AM.

Google Chrome
Google LLC · v155.0.8059.40
4818
open
Google Chrome (EXE)
Google LLC · v155.0.8059.40
4818
open
Google Chrome Beta (EXE)
Google LLC · v156.0.8078.17
4818
open
Google Chrome Canary
Google LLC · v157.0.8097.0
4818
open
Google Chrome Beta
Google LLC · v156.0.8078.17
4818
open
Google Chrome Dev (EXE)
Google LLC · v157.0.8092.0
4818
open
Google Chrome Dev
Google LLC · v157.0.8092.0
4818
open
Mozilla Firefox (en-US)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (dsb)
Mozilla · v157.0.1
1343
open
IceCat
Mozilla · v115.24.0
1343
open
Mozilla Firefox (gd)
Mozilla · v157.0.1
1343
open
LibreWolf
LibreWolf · v157.0.1-1
1343
open
Mozilla Firefox (MSIX)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (id)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (hy-AM)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (MSIX) Nightly
Mozilla · v160.2610.921.0
1343
open
Mozilla Firefox (zh-CN)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (pt-PT)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (xh)
Mozilla · v157.0.1
1343
open
Mercury AVX2
Alex313031 · v129.0.2
1343
open
Mozilla Firefox (tr)
Mozilla · v157.0.1
1343
open
Mozilla Firefox (pt-BR)
Mozilla · v157.0.1
1343
open
Firefox Beta (MSIX)
Mozilla Corporation · v153.0.11
1343
open
Mozilla Firefox (en-GB)
Mozilla · v157.0.1
1343
open