CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use
CVE-2025-68365 is a vulnerability in fs/ntfs3: Initialize allocated memory before use, rated Moderate by Microsoft, with a CVSS 3.1 base score of 6.6 (Medium). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild. The EPSS model estimates a 0.41% probability of exploitation activity in the next 30 days, higher than 36% of all scored vulnerabilities. Microsoft released the fix on 25 December 2025 in the December 2025 Patch Tuesday. It affects 2 products in 1 product family (Open Source Software).