winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/16/2026, 12:17:12 PM.

Mozilla Thunderbird ESR (cs)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird Beta (MSIX)
Mozilla · v148.0.6
953
open
Mozilla Thunderbird ESR (hsb)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (pt-BR)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird (ru)
Mozilla · v156.0
953
open
Mozilla Thunderbird ESR (pt-PT)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (dsb)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (ar)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (es-AR)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird (MSIX)
Mozilla · v156.0
953
open
Mozilla Thunderbird ESR (el)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (nb-NO)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird (nn-NO)
Mozilla · v156.0
953
open
Mozilla Thunderbird (it)
Mozilla · v156.0
953
open
Mozilla Thunderbird ESR (es-MX)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (MSIX)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (gl)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (lt)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (th)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (fi)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird (ast)
Mozilla · v156.0
953
open
Mozilla Thunderbird ESR (de)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird ESR (vi)
Mozilla · v153.2.0
953
open
Mozilla Thunderbird (et)
Mozilla · v156.0
953
open