Adobe ColdFusion (2025 release) Updates Release Notes

ColdFusion (2025) Update 3 includes important security fixes that mitigate vulnerabilities related to arbitrary file reads, code execution, privilege escalation, and security feature bypass.

The update also upgrades the underlying Tomcat engine to version 10.1.42 and resolves several issues reported in earlier updates.

View the security bulletin, APSB25-69, for more information.

For more information, see the tech note.

ColdFusion (2025 release) Update 2 (release date, May 13, 2025) resolves critical and important vulnerabilities  that could lead to arbitrary file system reads, arbitrary code execution, privilege escalation, and security feature bypass. It also addresses the PDFg service-related issues from the previous ColdFusion update.

View the security bulletin, APSB25-52, for more information.

For more details, see the tech note.

ColdFusion (2025 release) Update 1 (release date, 8 April, 2025) vulnerabilities  that could lead to arbitrary file system read and code execution.

For more information, security bulletin APSB25-15.

For more information, see the tech note.