winget packages with open CVEs
2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:18:49 AM.
Visual Studio Enterprise 2022
Microsoft Corporation · v17.14.41
136
open
Visual Studio Community 2026 Insiders
Microsoft Corporation · v18.11.12210.170
136
open
Remote Tools for Visual Studio 2022
Microsoft Corporation · v17.14.40
136
open
Visual Studio Enterprise 2026 Insiders
Microsoft Corporation · v18.11.12210.170
136
open
Visual Studio Professional 2026 Insiders
Microsoft Corporation · v18.11206.111
136
open
Microsoft SQL Server 2017 Developer
Microsoft Corporation · v14.0.1000.169
136
open
Visual Studio 2022 Remote Debugger for Devices
Microsoft Corporation · v17.14.6
136
open
Visual Studio Remote Debugger for Devices
Microsoft Corporation · v18.10.0
136
open
Microsoft SQL Server 2017 Express
Microsoft Corporation · v14.0.1000.169
136
open
QEMU guest agent
RedHat · v110.0.2
120
open
IrfanView
Irfan Skiljan · v4.75
120
open
IrfanView PlugIns
Irfan Skiljan · v4.75
120
open
QEMU
QEMU Community · v11.1.0
120
open
qemu-img
cloudbase · v2.3.0
120
open
Ivanti Package Studio
Ivanti · v3.8.1
114
open
Devolutions Server Console
Devolutions inc. · v2026.2.16.0
110
open
Visual Studio BuildTools 2019
Microsoft Corporation · v16.11.60
107
open
Microsoft Visual Studio Community 2019
Microsoft Corporation · v16.11.37627.13
107
open
Visual Studio Professional 2019
Microsoft Corporation · v16.11.60
107
open
Visual Studio Enterprise 2019
Microsoft Corporation · v16.11.60
107
open
ACS
Splunk · v2.26.0
106
open
Apple Mobile Device Support
Apple Inc. · v19.4.0.10
104
open
iTunes
Apple Inc. · v12.13.11.1
104
open
ColorAnt
ColorLogic · v11.1.0
104
open