winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/18/2026, 6:18:49 AM.

ColorAnt
ColorLogic · v11.1.0
104
open
Microsoft .NET Windows Desktop Runtime 10.0
Microsoft Corporation · v10.0.12
103
open
Microsoft .NET Windows Desktop Runtime 8.0
Microsoft Corporation · v8.0.31
103
open
Microsoft .NET SDK 10.0
Microsoft Corporation · v10.0.401
103
open
Microsoft .NET Windows Desktop Runtime 6.0
Microsoft Corporation · v6.0.36
103
open
Microsoft .NET SDK 8.0
Microsoft Corporation · v8.0.425
103
open
Microsoft .NET Runtime 10.0
Microsoft Corporation · v10.0.12
103
open
Microsoft .NET SDK 9.0
Microsoft Corporation · v9.0.318
103
open
Microsoft .NET Windows Desktop Runtime 9.0
Microsoft Corporation · v9.0.20
103
open
Microsoft Windows Desktop Runtime - 8.0.25 (x86)
Microsoft Corporation · v8.0.25
103
open
Microsoft Windows Desktop Runtime - 8.0.25 (x64)
Microsoft Corporation · v8.0.25
103
open
Microsoft .NET Windows Desktop Runtime 5.0
Microsoft Corporation · v5.0.17
103
open
Microsoft .NET Runtime 6.0
Microsoft Corporation · v6.0.36
103
open
Microsoft .NET SDK 7.0
Microsoft Corporation · v7.0.410
103
open
Microsoft .NET SDK 5.0
Microsoft Corporation · v5.0.408
103
open
Microsoft Windows Desktop Runtime - 8.0.25 (arm64)
Microsoft Corporation · v8.0.25
103
open
Microsoft .NET SDK 6.0
Microsoft Corporation · v6.0.428
103
open
Microsoft .NET Windows Desktop Runtime 11.0 Preview
Microsoft Corporation · v11.0.0-rc.1.26425.128
103
open
Microsoft .NET Runtime 7.0
Microsoft Corporation · v7.0.20
103
open
Bento4
Axiomatic Systems, LLC. · v1.6.0-641
103
open
Microsoft .NET Windows Desktop Runtime 7.0
Microsoft Corporation · v7.0.20
103
open
Microsoft .NET Runtime 5.0
Microsoft Corporation · v5.0.17
103
open
Microsoft .NET SDK 11.0 Preview
Microsoft Corporation · v11.0.100-rc.1.26425.128
103
open
JetBrains YouTrack
JetBrains · v23.1.16998
103
open