winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 12:14:47 PM.

PDF-XChange PRO
PDF-XChange Co Ltd. · v11.0.1.0
4
open
Nitro PDF Pro
Nitro · v14.43.7.0
4
open
Microsoft Azure CLI
Microsoft Corporation · v2.90.0
4
open
NVIDIA GeForce NOW
NVIDIA Corporation · v2.0.88.129
4
open
Greenshot
Greenshot · v1.3.315
4
open
Advanced SystemCare
IObit · v19.6.0.238
4
open
Spice agent
The Spice Project · v0.10.0
4
open
Azure DevOps Integration Tool for Office 2019
Microsoft Corporation · v17.12.35431.1
4
open
XAMPP 8.2
Apache Friends · v8.2.12-0
4
open
BandiView
Bandisoft.com · v8.0
4
open
protobuf
Protocol Buffers · v36.0
4
open
SQLcl
Oracle Corporation · v26.2.0.181.2110
4
open
SQL Developer
Oracle Corporation · v24.3.1
4
open
Anaconda3
Anaconda, Inc. · v2025.12-2
4
open
Crestron AirMedia
Crestron Electronics, Inc. · v5.11.1.164
4
open
Cherry Studio
support@cherry-ai.com · v2.1.0
4
open
P4 Apps
Perforce Software, Inc. · v242.62.3
4
open
Chatbox
Benn Huang · v1.23.3
4
open
GnuWin32: UnZip
GnuWin32 · v5.51-1
4
open
Copilot CLI (Preview)
GitHub, Inc. · vv1.0.78-3
4
open
XAMPP 8.1
Apache Friends · v8.1.25-0
4
open
Stelliberty
Stelliberty · v2.0.32
4
open
Clash Nyanpasu
keiko233 · v1.6.1
4
open
Mozilla VPN
Mozilla Corporation · v2.39.0
4
open