Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288)

CVE

CVE-2016-7288

Published

2017-05-01 22:00

Collected

2026-07-08 12:36

---
id: 4526
title: "Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288)"
cve: CVE-2016-7288
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/exploiting-ms16-145-ms-edge-typedarraysort-use-after-free-cve-2016-7288.html"
published_at: "2017-05-01T22:00:00Z"
tags: ["rce", "use-after-free", "windows", "exploitation", "cve", "microsoft-edge", "control-flow-guard"]
phying_url: "https://phying.com/item/4526"
lang: en
---

# Exploiting MS16-145: MS Edge TypedArray.sort Use-After-Free (CVE-2016-7288)

## Summary

Exploiting CVE-2016-7288, a use-after-free in MS Edge's TypedArray.sort: root cause analysis, reliable triggering, abusing Quicksort and WebGL for read/write primitives, and a CFG bypass with COOP.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2016-7288
- **Published:** 2017-05-01T22:00:00Z
- **Original:** https://blog.quarkslab.com/exploiting-ms16-145-ms-edge-typedarraysort-use-after-free-cve-2016-7288.html
- **Phying News:** https://phying.com/item/4526