http://googleonlinesecurity.blogspot.com/2012/04/spurring-more-vulnerability-research.html

pointing to

http://www.google.com/about/company/rewardprogram.html

the 2nd link includes a table, quoting:

<<Rewards for qualifying bugs range from $100 to $20,000. The following table outlines the usual rewards for the anticipated classes of bugs:>>