winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/19/2026, 6:11:47 PM.

OSForensics
PassMark Software · v11.1.1016.0
3
open
DiskBoss Ultimate
Flexense Computing Systems Ltd. · v16.0.12
3
open
Dive
OpenAgentPlatform · v0.14.3
3
open
InstallBuilder for Qt
Backstaff · v25.3.1
3
open
DiskBoss Enterprise
Flexense Computing Systems Ltd. · v16.0.12
3
open
InstallBuilder Professional for Windows
Backstaff · v25.3.1
3
open
NVIDIA Video Effects
NVIDIA Corporation · v0.6.5
3
open
DiskBoss
Flexense Computing Systems Ltd. · v16.8.24
3
open
DiskBoss Pro
Flexense Computing Systems Ltd. · v16.0.12
3
open
DiskBoss Server
Flexense Computing Systems Ltd. · v16.0.12
3
open
InstallBuilder for Windows
Backstaff · v25.3.1
3
open
cloudflared
cloudflare · v2026.9.1
2
open
Pandoc
John MacFarlane · v3.11
2
open
SimpMusic
maxrave-dev · v1.2.1
2
open
GOM Player
GOM & Company · v2.3.114.5384
2
open
RealVNC Viewer
RealVNC · v7.15.1.18
2
open
WeChat
腾讯科技(深圳)有限公司 · v4.1.15.11
2
open
CodeMeter Runtime Kit
WIBU-SYSTEMS AG · v9.10.8166.500
2
open
Mullvad VPN
Mullvad VPN · v2026.4
2
open
Spice webdavd
The Spice Project · v2.4.0
2
open
RealVNC Server
RealVNC · v7.18.0.14
2
open
Microsoft SQL Server Management Studio
Microsoft Corporation · v20.2.1
2
open
Battle.net Setup
Blizzard Entertainment · v1.19.3.3219
2
open