winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:16:52 AM.

Microsoft Visio Viewer 2016
Microsoft Corporation · v16.0.4339.1001
11
open
Azure Monitor Agent
Microsoft Corporation · v1.44.0.0
11
open
Cinema 4D 2024
Maxon · v2024.5.1
11
open
Cinema 4D 2026
Maxon · v2026.0.0
11
open
Dell Display and Peripheral Manager
Dell Technologies · v2.2.2.8
11
open
yt-dlp-gui
dsymbol · v2025.09.30
11
open
AKS Engine - Units of Kubernetes on Azure Stack Hub
Microsoft · v0.80.3
11
open
Octopus CLI
Octopus Deploy Pty. Ltd. · v2.26.0
11
open
HalalDL
Asdmir786 · v0.6.0
11
open
Apache JMeter
DEVCOM · v5.6.3
11
open
Video Downloader
kayapater · v2.0.1
11
open
NZXT CAM
NZXT, Inc. · v4.76.5
11
open
ESET Endpoint Security
ESET, spol. s r.o. · v13.0.2044.0
11
open
AKS desktop
Microsoft · v0.43.0
11
open
Microsoft Azure Arc Setup
Microsoft · v3
11
open
ESET Security
ESET, spol. s r.o. · v19.2.10.0
11
open
Azure Connected Machine Agent
Microsoft Corporation · v1.63.03384.2896
11
open
wamr
cataggar · v3.0.0-dev.13
11
open
DiskPulse
Flexense Computing Systems Ltd. · v17.3.18
11
open
OpenSearch SQL ODBC Driver
Amazon · v1.1.0.1
11
open
Naver Whale
Naver Corporation · v4.39.410.14
11
open
DiskPulse Pro
Flexense Computing Systems Ltd. · v17.3.18
11
open
DiskPulse Enterprise
Flexense Computing Systems Ltd. · v17.3.18
11
open
Hoppscotch
hoppscotch · v26.8.1-0
11
open