Oracle releases Java updates periodically. How do you handle these updates in the context of ColdFusion?
Go ahead and upgrade.
All ColdFusion users can upgrade Java to the latest minor version for their ColdFusion servers. For example, ColdFusion customers using JDK 1.7.0_x can upgrade to the latest JDK 1.7.0_x update. (At the time of writing, the current version is JDK 1.7.0_15). ColdFusion is now certified on JDK 1.7.0_15.
For the supported ColdFusion versions, Adobe supports all minor releases of Java. For example, if ColdFusion supports JDK 1.7.0, all JDK 1.7.0_x updates are supported. If you face any issues with the latest version of JDK which is not certified with ColdFusion, then you can simply report a bug so that we can investigate further.