winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:18:49 AM.

Mozilla Firefox ESR (th)
Mozilla · v153.3.0
361
open
Mozilla Firefox ESR (ca-valencia)
Mozilla · v153.3.0
361
open
Mozilla Firefox ESR (trs)
Mozilla · v153.3.0
361
open
Mozilla Firefox ESR (hsb)
Mozilla · v153.3.0
361
open
Foxit PDF Reader
Foxit Software Inc. · v2026.2.0.39747
338
open
Foxit PDF Reader
Foxit Software Inc. · v2025.2.0.33046
338
open
Foxit PDF Editor (MSI)
Foxit Software Inc. · v2026.2.0.39747
298
open
Foxit PDF Editor
Foxit Software Inc. · v14.0.7.33751
298
open
Foxit PDF Editor
Foxit Software Inc. · v2026.2.0.39747
298
open
Microsoft Edge WebDriver
Microsoft Corporation · v153.0.4234.46
295
open
Microsoft Edge
Microsoft Corporation · v153.0.4234.46
295
open
Microsoft Edge WebView2 Runtime
Microsoft Corporation · v153.0.4234.46
295
open
Microsoft Edge Canary
Microsoft Corporation · v142.0.3539.0
295
open
Microsoft Edge Dev
Microsoft Corporation · v155.0.4273.0
295
open
Microsoft Edge Beta
Microsoft Corporation · v154.0.4258.18
295
open
PDF-XChange Editor
PDF-XChange Co Ltd. · v11.0.1.0
285
open
PDF-XChange Standard
PDF-XChange Co Ltd. · v11.0.1.0
285
open
PDF-XChange Viewer
Tracker Software Products (Canada) Ltd. · v2.5.322.10
285
open
Oracle VirtualBox
Oracle and/or its affiliates · v7.2.18
267
open
Fuzzy Lookup Add-In For Excel
Microsoft · v1.3.0.0
263
open
JetBrains TeamCity
JetBrains s.r.o. · v2026.2
251
open
TeamCityCLI
JetBrains · v1.5.0
251
open
ImageMagick Q16
ImageMagick Studio LLC · v7.1.2.30
249
open
ImageMagick Q16-HDRI
ImageMagick Studio LLC · v7.1.2.30
249
open