Are Adobe Acrobat & ColdFusion safe right now?
No Adobe Acrobat & ColdFusion flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jul 7, 2026). Keep automatic updates on: that can change any day.
Earlier exploited flaws
- Adobe ColdFusion Path Traversal Vulnerability Zero-day
- Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability
- Adobe Acrobat and Reader Prototype Pollution Vulnerability Zero-day
- Adobe Acrobat Use-After-Free Vulnerability
- Adobe ColdFusion Deserialization Vulnerability
- Adobe ColdFusion Improper Access Control Vulnerability
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Adobe Acrobat and Reader Use-After-Free Vulnerability
- Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability Zero-day
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
- Adobe ColdFusion Improper Access Control Vulnerability Zero-day
- Adobe ColdFusion Improper Access Control Vulnerability
- Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Zero-day
- Adobe Acrobat and Reader Double Free Vulnerability
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 4 | 2 |
| 2025 | 1 | 0 |
| 2024 | 3 | 0 |
| 2023 | 6 | 3 |
| 2022 | 21 | 0 |
Questions
Are Adobe Acrobat & ColdFusion safe right now?
No Adobe Acrobat & ColdFusion flaws have been added to CISA's exploited list in the last 90 days (the most recent was Jul 7, 2026). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Adobe Acrobat & ColdFusion vulnerabilities have been exploited?
39 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks, 5 of them used by ransomware.
Covers products matching acrobat, coldfusion. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.