Adobe has acknowledged that the vulnerability in its PDF reader apps has been exploited by bad actors worldwide for months, but did not reveal how many were affected.