Adobe Acrobat Pro Dc 2020.012.20048 -x86 X64-... -
Build 2020.012.20048 includes Protected View (sandboxing) but it is not enabled by default for all files. Adobe’s default “Files from potentially unsafe locations” turned on sandbox. However, many users disabled it for convenience, exposing themselves.
Recommendation: Immediately uninstall this build if present. Update to 2020.013.20074 or later (or migrate to the Continuous Track).
This version is also susceptible to other vulnerabilities patched in the subsequent security bulletin (APSB21-09), including: Adobe Acrobat Pro DC 2020.012.20048 -x86 x64-...
Adobe Acrobat Pro DC 2020 is a powerful desktop application for creating, editing, managing, and securing PDF documents. Version 2020.012.20048 is a stable release from the 2020 Classic Track, offering support for both 32-bit (x86) and 64-bit (x64) Windows environments.
This release bridges the gap between legacy compatibility (x86) and modern performance (x64), making it suitable for diverse enterprise and personal use cases. Build 2020
This is the most important section for any system administrator. Do not use this version on a production machine connected to the internet unless absolutely isolated.
Adobe releases Security Bulletins (APSB) monthly. For the Classic Track 2020, here are vulnerabilities present in build 20048 but fixed in later builds: This version is also susceptible to other vulnerabilities
| CVE ID | Severity | Description | Fixed in Build | | :--- | :--- | :--- | :--- | | CVE-2020-9715 | Critical | Use-after-free leading to RCE (Remote Code Execution) | 2020.013.20074 | | CVE-2020-9728 | Important | Out-of-bounds write → memory corruption | 2020.013.20074 | | CVE-2021-21017 | Critical | Heap overflow via crafted PDF causing system takeover | 2021.001.20135 (not applicable) | | CVE-2021-28550 | Critical | Arbitrary code execution via JavaScript API | 2021.005.20048+ |
Real-world impact: In 2021, threat actors exploited CVE-2020-9715 in phishing campaigns using malicious PDFs labeled “Invoice_2020.pdf.” If opened in Acrobat Pro DC build 20048, the attacker could install ransomware without user interaction (except disabling Protected View).