I thought this was a very interesting blog post (from Endgame) on bypassing Control Flow Guard making use of something called "Counterfeit Object-Oriented Programming (COOP)" which looks like an interesting alternative to ROP (Return-Oriented Programming).

https://www.endgame.com/blog/disarming-control-flow-guard-using-advanced-code-reuse-attacks