CVE-2026-4722 is a privilege escalation vulnerability affecting the IPC component in Mozilla Firefox. This vulnerability allows an attacker to gain elevated privileges within the browser process. It was resolved in Firefox 149 and Thunderbird 149. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The Mozilla Foundation released an advisory detailing the fix as part of a broader security update addressing multiple high-impact vulnerabilities.

Successful exploitation of CVE-2026-4722 could allow an attacker to escalate privileges within the Firefox browser, potentially leading to unauthorized actions or access. The CVSS score of 8.8 reflects a high impact on confidentiality, integrity, and availability. However, there are no reports of active exploitation in the wild. The vulnerability affects Firefox versions prior to 149 and Thunderbird versions prior to 149.

Mozilla has released an official fix for this vulnerability in Firefox 149 and Thunderbird 149. Users and administrators should update affected products to these versions or later to remediate the issue. Since this is not a cloud service, remediation requires applying the update. There are no vendor advisories indicating that no action is required or that the issue is already mitigated without patching.